2 matches found
CVE-2026-71012
A low-privilege network attacker can exploit insufficient access control in Oracle Commerce Experience Manager 11.4.0 to read critical data and cause partial DoS (CVSS 7.1). Oracle released patches in its August 2026 Critical Patch Update; no in-the-wild exploitation is reported. Apply the update...
7.1CVSS5.3AI score0.00279EPSS
SaveExploits0References1Affected Software2
20