3 matches found
CVE-2026-71032
Oracle Commerce 11.4.0's Endeca Application Controller has an easily exploitable, unauthenticated HTTP vulnerability allowing unauthorized read, insert, delete, and update access to data, with CVSS 7.2 (HIGH). No patch or exploit details are provided; monitor Oracle's August 2026 CPU advisory for...
7.2CVSS5.8AI score0.00272EPSS
SaveExploits0References1Affected Software2
20