Threats tagged 'ghsa-6gvr-f32j-q7m9'

A critical vulnerability exists in Oracle BI Publisher, part of Oracle Analytics, affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. This vulnerability allows a high privileged attacker with network access via HTTP to potentially take over the Oracle BI Publisher component. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.1. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.