Threats tagged 'ghsa-5qpj-fcrc-r82w'

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with network access via HTTP to compromise the product. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 that addresses this and many other vulnerabilities across multiple products, including Oracle Hyperion Financial Management. Oracle strongly recommends applying the available patches promptly to mitigate this risk.