Threats tagged 'ghsa-cq9x-h4gc-c4rg'

A high-severity vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000. This vulnerability allows a low-privileged attacker with network access via HTTP to potentially take over the affected system. The CVSS 3.1 base score is 8.8, indicating critical impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes across multiple products including Oracle Hyperion Financial Management. Customers are strongly advised to apply the relevant patches promptly to mitigate this risk.