漏洞标题
N/A
漏洞描述信息
Oracle Commerce Commerce Guided Search / Commerce Experience Manager产品(组件：工具和框架)中的漏洞。受影响的支持版本是11.3.1.5。容易利用的漏洞允许通过HTTP网络访问的较低权限攻击者 compromising Oracle Commerce Guided Search / Commerce Experience Manager。这个漏洞的成功攻击可能导致未经授权读取访问Oracle Commerce Guided Search / Commerce Experience Manager可访问数据的部分。CVSS 3.1基础得分为4.3(保密影响)。CVSS向量：(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
漏洞类别
N/A
漏洞标题
Oracle Commerce Experience Manager 输入验证错误漏洞
漏洞描述信息
Oracle Commerce是美国甲骨文（Oracle）公司的一套电子商务解决方案。 Oracle Commerce Experience Manager 11.3.1.5版本存在输入验证错误漏洞，低特权攻击者可利用该漏洞通过HTTP网络访问，以破坏Oracle Commerce Guided Search Oracle Commerce Experience Manager。
CVSS信息
N/A
漏洞类别
输入验证错误