Threats tagged 'ghsa-9w69-6jhg-wgh6'

A vulnerability exists in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 affecting access and security components. It allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes. Customers are strongly advised to apply the available patches promptly to mitigate this risk.