2 matches found
CVE-2026-71005
Oracle Commerce 11.4.0 Experience Manager component is vulnerable: an unauthenticated remote attacker can exploit it via HTTP (with user interaction) to read and modify data, with scope change affecting additional products. CVSS 6.1 MEDIUM. No exploitation observed; Oracle has released updates. M...
6.1CVSS5.3AI score0.00179EPSS
SaveExploits0References1Affected Software2
20