Oracle Commerce Guided Search / Oracle Commerce Experience Manager vulnerabilities

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Workbench) version 11.4.0. A low-privileged attacker with network access can, with user interaction, access and modify critical data, affecting other products.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. A low-privileged attacker with network access can, with user interaction, access and modify critical data, affecting other products.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. A low-privileged attacker with network access can, with user interaction, access and modify critical data, affecting other products.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Internal operations) version 11.4.0. An unauthenticated attacker via HTTP with user interaction can modify, insert, or delete some data and read a subset of data. Attacks may impact additional products (scope change).

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. An unauthenticated attacker can, with user interaction, access and modify critical data, affecting other products.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. An unauthenticated attacker via HTTP can gain unauthorized access to critical data or all accessible data and cause partial denial of service.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. An unauthenticated attacker can, with user interaction, access and modify critical data, affecting other products.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) version 11.4.0. A low-privileged attacker can compromise data confidentiality and integrity via HTTP, including unauthorized access to or modification of critical data.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. An unauthenticated attacker can gain unauthorized access to critical data via HTTP, with potential scope change affecting other products.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. An unauthenticated attacker can cause system hang or frequent crashes (complete DoS) and unauthorized modification of some data via HTTP.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. A low-privileged attacker with local access can take over the system, but exploitation is difficult.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. A low-privileged attacker can gain unauthorized access to critical data via HTTP, with potential scope change affecting other products.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. An unauthenticated attacker can gain unauthorized access to critical data via HTTP.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. An unauthenticated attacker can gain unauthorized access to critical data via HTTP.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. An unauthenticated attacker can gain unauthorized access to critical data via HTTP.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, Content Acquisition System component. Affects version 11.4.0. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to critical data or complete access to all product data. May impact other products (scope change).

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, Content Acquisition System component. Affects version 11.4.0. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to critical data or complete access to all product data. May impact other products (scope change).

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. Difficult to exploit, allows an unauthenticated attacker via HTTPS to gain unauthorized access and modify critical data.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) version 11.4.0. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.

In Oracle Commerce Guided Search / Experience Manager version 11.4.0, an unauthenticated attacker can remotely access critical data via HTTP. CVSS 7.5 (confidentiality).

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Experience Manager component) version 11.4.0. Low-privileged attacker via HTTP can unauthorizedly read and modify data.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager). Affects version 11.4.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes of some data. CVSS 7.1 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager). A low-privileged attacker via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) version 11.4.0. Allows a low-privileged attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. An unauthenticated attacker with local access can cause a complete denial of service (DOS).