Threats tagged 'ghsa-4p5g-mjwx-4xxf'

A vulnerability exists in Oracle Platform Security for Java within Oracle Fusion Middleware, specifically in the Centralized Thirdparty Jars component. It affects versions 12.2.1.4.0 and 14.1.2.0.0. The flaw allows a low privileged attacker with logon access to the infrastructure to potentially take over the Oracle Platform Security for Java component. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Users are strongly advised to apply these patches promptly to mitigate the risk.