2 matches found
CVE-2026-71027
The vulnerability affects Oracle Commerce 11.4.0, specifically the Endeca Application Controller component. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction) to gain unauthorized read access to critical data and limited write/modify access. CVSS 7.6 (...
7.6CVSS5.3AI score0.00254EPSS
SaveExploits0References1Affected Software2
20