3 matches found
CVE-2026-71012
...
7.1CVSS0.00376EPSS
SaveExploits0References1
CVE-2026-71012
A low-privilege network attacker can exploit insufficient access control in Oracle Commerce Experience Manager 11.4.0 to read critical data and cause partial DoS (CVSS 7.1). Oracle released patches in its August 2026 Critical Patch Update; no in-the-wild exploitation is reported. Apply the update...
7.1CVSS5.7AI score0.00376EPSS
SaveExploits0References1Affected Software2
20