Threats tagged 'ghsa-gf36-p3h9-4h4j'

A critical vulnerability exists in Oracle Access Manager (component: Authentication Engine) affecting versions 12.2.1.4.0 and 14.1.2.1.0. This vulnerability allows a low privileged attacker with network access via HTTPS to compromise Oracle Access Manager, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 9.6, indicating high confidentiality and integrity impacts. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.