Threats tagged 'ghsa-523w-mh4p-v4pm'

A vulnerability exists in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 related to access and security. It allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.