CVE-2021-2348
First published: Tue Jul 20 2021(Updated: )
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Commerce Experience Manager | =11.3.1.5 | |
| Oracle Commerce Guided Search | =11.3.1.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-2348?
CVE-2021-2348 is a vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce.
What is the severity of CVE-2021-2348?
The severity of CVE-2021-2348 is medium with a CVSS score of 4.3.
How does CVE-2021-2348 affect Oracle Commerce Experience Manager?
CVE-2021-2348 affects Oracle Commerce Experience Manager version 11.3.1.5.
How does CVE-2021-2348 affect Oracle Commerce Guided Search?
CVE-2021-2348 affects Oracle Commerce Guided Search version 11.3.1.5.
How can the CVE-2021-2348 vulnerability be exploited?
The CVE-2021-2348 vulnerability can be exploited by a low privileged attacker with network access via HTTP.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle commerce experience manager
- version/oracle commerce experience manager/11.3.1.5
- canonical/oracle commerce guided search
- version/oracle commerce guided search/11.3.1.5