CVE-2026-83256

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) is affected in supported version 11.4.0 . An unauthenticated attacker with network access via TCP can exploit this vulnerability, which is rated difficult to exploit (high attack complexity), to achieve takeove...

CVE-2026-83257

CVE-2026-83257 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the affected product. The attack is rated difficult to ...

CVE-2026-83255

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to achieve takeover of the product. The attack is rated as difficult to exploit (high complex...

CVE-2026-83253

CVE-2026-83253 affects the Endeca Application Controller component within Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0 ). This easily exploitable vulnerability allows an unauthenticated attacker with local access to the infrastructure where the product execut...

CVE-2026-83254

A difficult to exploit vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), affecting version 11.4.0 , allows an unauthenticated attacker with network access via TCP to achieve takeover of the product. The high attack complexity reflects the exp...

CVE-2026-83252

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based vulnerability exploitable via HTTP by an unauthenticated attacker. Exploitation is rated as difficult (high complexity). Successful exploitation can lead to high co...

CVE-2026-83250

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...

CVE-2026-83251

CVE-2026-83251 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via TLS to cause a complete denial of service (hang or frequently repeatable ...

CVE-2026-83249

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a local, high-complexity vulnerability. A low-privileged attacker with logon to the host infrastructure can exploit this flaw to achieve takeover of the product, with a scope ch...

CVE-2026-83247

CVE-2026-83247 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability is a local attack vector requiring no prior privileges but needing user interaction from a non-attacker. Successful exploitation results in a full ...

CVE-2026-83248

CVE-2026-83248 affects the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product, specifically the Forge component, in supported version 11.4.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via HTTP and no user interaction requir...

CVE-2026-83245

Oracle Commerce Guided Search / Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based, unauthenticated vulnerability exploitable via HTTP . The attack complexity is rated high (difficult to exploit), but successful exploitation can result in full takeover of the pro...

CVE-2026-83246

CVE-2026-83246 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, resulting in high impact to confidentialit...

CVE-2026-83244

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a difficult-to-exploit vulnerability exploitable by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the product exec...

CVE-2026-83242

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager ), version 11.4.0 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can resu...

CVE-2026-83241

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , contains a high-complexity, unauthenticated vulnerability exploitable over HTTP . An attacker requires user interaction from a non-attacker to succeed, after which the result is full takeover ...

CVE-2026-83243

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager ) version 11.4.0 is affected by an easily exploitable network vulnerability. A low-privileged attacker with HTTP network access can exploit it without user interaction, resulting in unauthorized acce...

CVE-2026-83239

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller ) version 11.4.0 is affected by a local vulnerability that can lead to full takeover of the product. The attack vector is local with high complexity and requires a low-privileged account w...

CVE-2026-83240

CVE-2026-83240 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . A low-privileged local attacker with infrastructure logon can exploit this vulnerability with low complexity and no user interaction , leading to high integrity impa...

CVE-2026-83238

CVE-2026-83238 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , requiring no user interaction. Successful exploitation can lead to un...