Threats tagged 'ghsa-9g98-h886-2w83'

A vulnerability in Oracle BI Publisher (component of Oracle Analytics) allows a low privileged attacker with network access via SOAP to compromise the system. Affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. The vulnerability can lead to unauthorized creation, deletion, or modification of critical data and can cause denial of service by hanging or crashing the application. The CVSS 3.1 base score is 8.1, indicating high severity with impacts on integrity and availability. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update. Users are strongly advised to apply these patches promptly.