Threats tagged 'ghsa-599x-c57v-qcx5'

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with network access via HTTP to compromise the product. The vulnerability has a high severity with a CVSS 3.1 base score of 8.8, impacting confidentiality, integrity, and availability. Successful exploitation can lead to full takeover of the Oracle Hyperion Financial Management system. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities.