VULNERABILITY INTELLIGENCE

CVE-2026-71009

CVSS score7.4 HIGH

EPSS probability0.62%

CISA KEVNot currently listed

Published2026-08-18

Last modified2026-10-22

Description

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to c…