Threats tagged 'ghsa-gp9j-5hp4-jv9c'

A vulnerability in Oracle BI Publisher (part of Oracle Analytics) allows a low privileged attacker with network access via SOAP to compromise the system. Affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and unauthorized read access to some data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with confidentiality and integrity impacts. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly.