CVE-2026-71002

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0

Description A flaw in the Experience Manager component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized read access to a subset of data, as well as unauthorized creation, deletion, or modification of critical data or all accessible data within the product. Although the flaw resides in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, successful exploitation may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.