CVE-2026-83256

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) is affected in supported version 11.4.0 . An unauthenticated attacker with network access via TCP can exploit this vulnerability, which is rated difficult to exploit (high attack complexity), to achieve takeove...

EUVD-2026-79609

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

EUVD-2026-79610

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83257

CVE-2026-83257 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the affected product. The attack is rated difficult to ...

CVE-2026-83255

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to achieve takeover of the product. The attack is rated as difficult to exploit (high complex...

CVE-2026-83254

A difficult to exploit vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), affecting version 11.4.0 , allows an unauthenticated attacker with network access via TCP to achieve takeover of the product. The high attack complexity reflects the exp...

EUVD-2026-79607

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

EUVD-2026-79606

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

EUVD-2026-79603

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracl...

EUVD-2026-79604

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83252

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based vulnerability exploitable via HTTP by an unauthenticated attacker. Exploitation is rated as difficult (high complexity). Successful exploitation can lead to high co...

CVE-2026-83250

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

EUVD-2026-79602

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83251

CVE-2026-83251 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via TLS to cause a complete denial of service (hang or frequently repeatable ...

EUVD-2026-79600

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79601

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83249

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a local, high-complexity vulnerability. A low-privileged attacker with logon to the host infrastructure can exploit this flaw to achieve takeover of the product, with a scope ch...

CVE-2026-83247

CVE-2026-83247 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability is a local attack vector requiring no prior privileges but needing user interaction from a non-attacker. Successful exploitation results in a full ...

EUVD-2026-79599

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

CVE-2026-83248

CVE-2026-83248 affects the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product, specifically the Forge component, in supported version 11.4.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via HTTP and no user interaction requir...