CVE-2026-34316

Name of the Vulnerable Software and Affected Versions Oracle Commerce Service Center version 11.4.0

Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Commerce Service Center. This issue requires human interaction from a person other than the attacker and may result in a scope change, significantly impacting additional products. Successful exploitation allows unauthorized read access to a subset of data, as well as unauthorized update, insert, or delete access to some accessible data within the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.