## Summary
A vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) affects the supported version 11.4.0. The issue is described as difficult to exploit and involves an unauthenticated attacker who has access to the physical communication segment attached to the hardware where the product executes.
Successful exploitation may lead to unauthorized access to critical data, unauthorized update/insert/delete access to some accessible data, and the ability to cause a hang or frequently repeatable crash (complete DoS).
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H