EUVD-2026-79590
GHSA-4pv3-r486-33w2
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Network-reachable Forge endpoint with low complexity and no user interaction, but a valid low-privileged account is required, so PR:L; read-only exposure plus partial DoS.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).
AnalysisAI
Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 exposes its Forge component to a low-privileged, network-reachable attacker over HTTP, allowing unauthorized read access to critical data and a partial denial of service. The flaw carries a CVSS 3.1 base score of 7.1 (AV:N/AC:L/PR:L/UI:N, C:H/I:N/A:L), meaning a valid but low-privileged account is enough and no user interaction is required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privileged account on the Oracle Commerce Guided Search / Commerce Experience Manager 11.4.0 instance (CVSS PR:L) and network reachability to the Forge component over HTTP (AV:N, AC:L, UI:N) - the Forge endpoints must be exposed to the attacker's position, which in most deployments means either an internet-facing commerce front end or a shared internal network with partner/integrator access. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS vector is network-reachable, low complexity and needs no user interaction, but it does require low privileges (PR:L), which keeps it out of the unauthenticated-critical tier; the resulting 7.1 reflects broad data exposure plus a partial availability hit rather than full compromise. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Oracle's patch for Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 as published in the CPU advisory at https://www.oracle.com/security-alerts/cspusep2026.html (Patch available per vendor advisory; an exact build/patch number is not stated in the supplied data, so confirm the target version with Oracle Support or My Oracle Support before upgrading). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today