Oracle Commerce Guided Search/Oracle Commerce Experience Manager has an unspecified vulnerability (CNVD-2021-56438)

Oracle Commerce Guided Search enables people to interactively navigate data (regardless of the size and complexity of the underlying data) in real time through an easy-to-understand and use interface. Oracle Commerce Experience Manager is an intuitive web-based solution that enables you to create, deliver, and manage content rich digital experiences.A security vulnerability exists in the Tools and Frameworks component of Oracle Commerce Guided Search and Oracle Commerce Experience Manager version 11.3.1.5. The vulnerability can be exploited to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager by a low privilege attacker with HTTP access to the network.