Threats tagged 'ghsa-49qg-26q6-4vh9'

A critical vulnerability exists in Oracle Access Manager (component: Authentication Engine) versions 12.2.1.4.0 and 14.1.2.1.0. This vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Access Manager, potentially leading to a full takeover of the product. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.1. Oracle has released security patches addressing this issue in their September 2026 Critical Security Patch Update.