Threats tagged 'ghsa-5765-7fq3-wc96'

A vulnerability exists in the Oracle BI Publisher component of Oracle Analytics affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. This vulnerability requires network access via HTTP and low privileges to exploit, but successful exploitation can lead to full takeover of the Oracle BI Publisher. The CVSS 3.1 base score is 7.5, indicating a high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions.