Threats tagged 'ghsa-2mqx-mrv5-wjxg'

A vulnerability in Oracle Forms of Oracle Fusion Middleware (components Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Oracle Forms data. The CVSS 3.1 base score is 5.3, indicating a medium severity confidentiality impact. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.