Threats tagged 'ghsa-7587-xc2v-9q32'

A vulnerability in Oracle WebCenter Sites (part of Oracle Fusion Middleware) affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a high confidentiality impact but no integrity or availability impact. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.