CVE-2026-83251

Unauthenticated TLS-Based Denial of Service and Information Disclosure in Oracle Commerce Guided Search

Published Sep 15, 2026 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Description

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager and unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H).

Analysis

Technical impact

The vulnerability is in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component Forge and allows an unauthenticated attacker with network access over TLS to compromise the system. A successful attack can cause a hang or repeated crash, resulting in a complete denial of service, and also grants unauthorized read access to a subset of the application data. The weakness is an unauthorized disclosure of information and a lack of protection against denial‑of‑service attacks.

Affected Systems

Oracle Corporation’s Oracle Commerce Guided Search and Oracle Commerce Experience Manager, version 11.4.0, are the affected products. No other versions are listed as impacted, but upgrades beyond 11.4.0 should be verified to ensure no residual vulnerability exists.

Risk and Exploitability

The CVSS v3.1 baseline score of 6.5 places this vulnerability in the medium range, reflecting moderate confidentiality impact and high availability impact. The EPSS score is below 1 %, indicating that real‑world exploitation is considered unlikely. The vulnerability is not listed in the CISA KEV catalog. The attack vector is network access over TLS and the description notes the exploitation as difficult, suggesting that while the potential damage is significant, the likelihood of successful attack remains modest.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Oracle Corporation

Oracle Commerce Guided Search / Oracle Commerce Experience Manager

affected

Version	Status	Constraints
`11.4.0`	affected	—

No data.

Vendor Product Versions

Oracle

Commerce Guided Search / Oracle Commerce Experience Manager

Version	Status	Scheme	Platform
`11.4.0`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the official Oracle patch or upgrade to a version that is not affected, as outlined in the Oracle security advisory.
Restrict TLS access to the Oracle Commerce Guided Search / Experience Manager component using firewall or network segmentation rules to limit unauthenticated entry points.
Monitor application logs and system metrics for abnormal responses or frequent crashes that may indicate exploitation attempts.

Generated by OpenCVE AI on September 20, 2026 at 08:27 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.337% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://www.oracle.com/security-alerts/cspusep2026.html

History

Sep 22, 2026 4:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 20, 2026 8:45 AM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title		Unauthenticated TLS-Based Denial of Service and Information Disclosure in Oracle Commerce Guided Search
Weaknesses		CWE-284 CWE-400

Sep 18, 2026 9:30 PM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title	Unauthenticated TLS Attack Enables DoS and Data Exposure in Oracle Commerce 11.4.0
Weaknesses	CWE-200 CWE-285

Sep 16, 2026 9:30 PM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title		Unauthenticated TLS Attack Enables DoS and Data Exposure in Oracle Commerce 11.4.0
Weaknesses		CWE-200 CWE-285

Sep 16, 2026 4:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Oracle commerce Guided Search / Oracle Commerce Experience Manager
Vendors & Products		Oracle commerce Guided Search / Oracle Commerce Experience Manager

Sep 15, 2026 8:15 PM Description updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager and unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H).
First Time appeared		Oracle Oracle commerce Guided Search \/ Oracle Commerce Experience Manager
CPEs		cpe:2.3:a:oracle:commerce_guided_search_\/_oracle_commerce_experience_manager:11.4.0:::::::*
Vendors & Products		Oracle Oracle commerce Guided Search \/ Oracle Commerce Experience Manager
References		https://www.oracle.com/security-alerts/cspusep2026.html
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'}`