Threats tagged 'ghsa-325c-7fqh-vfrm'

A vulnerability exists in Oracle Forms, part of Oracle Fusion Middleware, affecting versions 12.2.1.19.0 and 14.1.2.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to potentially take over Oracle Forms. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.1, impacting confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes numerous fixes across multiple products. Customers are strongly advised to apply the available patches promptly.