Threats tagged 'ghsa-7qwh-gj68-3qhj'

A critical vulnerability (CVE-2026-87172) exists in Oracle Hyperion Financial Management version 11.2.26.0.000. It allows a low-privileged attacker with network access via HTTP to potentially take over the product, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 9.9, indicating critical severity. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities across multiple products.