CVE-2026-71005

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0

Description An unauthenticated attacker with network access via HTTP can compromise the Experience Manager component. This issue requires human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized read, update, insert, or delete access to a subset of accessible data and may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.