Threats tagged 'ghsa-392q-4px7-jg2p'

A vulnerability in Oracle Coherence, part of Oracle Fusion Middleware Core, allows a low privileged attacker with network access via multiple protocols to compromise the product. Affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Oracle strongly recommends applying these patches promptly to mitigate the risk.