Threats tagged 'ghsa-h4wm-gvmw-752c'

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows an unauthenticated attacker with access to the physical communication segment to compromise the product. The vulnerability has a high CVSS score of 8.8, indicating significant confidentiality, integrity, and availability impacts. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities across its product portfolio. Customers are strongly advised to apply the available patches promptly to mitigate the risk.