Threats tagged 'ghsa-2jp3-66ph-45f4'

A vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000 allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with confidentiality and availability impacts. Oracle has released security patches as part of its September 2026 Critical Security Patch Update.