Threats tagged 'ghsa-gwp8-3849-8p96'

A vulnerability in Oracle Forms of Oracle Fusion Middleware affects versions 12.2.1.19.0 and 14.1.2.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to potentially compromise Oracle Forms, leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 7.4, indicating high severity with impacts on confidentiality and integrity. Oracle has released security patches addressing this issue as part of its September 2026 Critical Security Patch Update.