Threats tagged 'ghsa-6qmp-x27f-4gj4'

A vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to potentially take over the Oracle Coherence component. The affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Oracle strongly recommends applying these patches promptly to mitigate the risk.