Threats tagged 'ghsa-6j3j-p65c-2wx6'

A vulnerability in Oracle Platform Security for Java (component: Centralized Thirdparty Jars) affects versions 12.2.1.4.0 and 14.1.2.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to potentially take over the affected component. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.