THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-70990 (MEDIUM 6.8) — Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with

[NVD] CVE-2026-70990 (MEDIUM 6.8) — Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with

mednvdPublished 2026-08-18

CVE-2026-70990 CVSS: 6.8 MEDIUM Published: 2026-08-18T21:17:57.980

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerc

Indicators of compromise

CVE-2026-70990cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-70990