CVE:CVE-2021-2348
CNNVD:CNNVD-202107-1341
Oracle Commerce是美国甲骨文（Oracle）公司的一套电子商务解决方案。
Oracle Commerce Experience Manager 11.3.1.5版本存在输入验证错误漏洞，低特权攻击者可利用该漏洞通过HTTP网络访问，以破坏Oracle Commerce Guided Search Oracle Commerce Experience Manager。
solution:Upgrade oracle commerce_experience_manager to a higher version than 11.3.1.5,and avoid the version 11.3.1.5; Upgrade oracle commerce_guided_search to a higher version than 11.3.1.5,and avoid the version 11.3.1.5