Oracle Commerce Guided Search enables people to interactively navigate data (regardless of the size and complexity of the underlying data) in real time through an easy-to-understand and use interface. Oracle Commerce Experience Manager is an intuitive web-based solution that enables you to create, deliver, and manage content rich digital experiences.A security vulnerability exists in the Tools and Frameworks component of Oracle Commerce Guided Search and Oracle Commerce Experience Manager version 11.3.1.5. An attacker could exploit this vulnerability to allow a low privilege attacker with HTT access to the network to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager.