THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-71033 (MEDIUM 5.5) — Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with

[NVD] CVE-2026-71033 (MEDIUM 5.5) — Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with

mednvdPublished 2026-08-18

CVE-2026-71033 CVSS: 5.5 MEDIUM Published: 2026-08-18T21:18:02.957

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Gu

Indicators of compromise

CVE-2026-71033cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-71033