AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OracleCVE-2026-83257

Oracle Commerce Guided Search / Oracle Commerce Experience Manager: takeover...

Oracle

CVE-2026-83257 · Published Sep 15, 2026 · updated Sep 17, 2026

High7.5
No fix yet
Oracle advisory

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected versions

PackageAffectedFixed in
Oracle Commerce Guided Search / Oracle Commerce Experience Manager
Product
<= 11.4.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-269

More Oracle advisories

All Oracle
High 8.1Sep 15Oracle GraalVM for JDK: takeover via CompilerCVE-2026-83357no fix yetHigh 7.0Sep 15Oracle GraalVM for JDK: data tampering via CompilerCVE-2026-83368no fix yetHigh 8.1Sep 15Oracle GraalVM for JDK: takeover via CompilerCVE-2026-83408no fix yetLow 3.2Sep 15Oracle VM VirtualBox: flaw in CoreCVE-2026-87284no fix yetMedium 6.0Sep 15Oracle VM VirtualBox: denial of service via CoreCVE-2026-87285no fix yetHigh 8.1Sep 15Oracle GraalVM: takeover via CompilerCVE-2026-87286no fix yet