Threats tagged 'ghsa-72jq-fq67-46gc'

A vulnerability in Oracle Fusion Middleware's Helidon product, specifically in the helidon-dbclient-mongodb component, affects versions 3.0.0 through 3.2.20 and 4.0.0 through 4.5.4. The flaw allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data, perform unauthorized data modifications, and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes patches for the affected Helidon versions.