CVE-2026-70990

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HT...

CVE-2026-70990

...

CVE-2026-70990

Oracle Commerce 11.4.0 Content Acquisition System is vulnerable to an unauthenticated, network-based HTTP attack with high complexity (CVSS 6.8) allowing unauthorized access to critical data. No exploitation or fix details are provided. Monitor Oracle's August 2026 security advisory for patches.

CVE-2026-70990

...