CVE-2026-71000

...

CVE-2026-71000

Oracle Commerce Experience Manager (component of Oracle Commerce) version 11.4.0 is affected by a HIGH-severity (CVSS 8.7) flaw exploitable over HTTP by a low-privileged attacker requiring user interaction, enabling unauthorized creation, deletion, or modification of critical data with scope chan...