Threats tagged 'ghsa-h7fm-qpx5-ch7x'

A vulnerability exists in Oracle BI Publisher component of Oracle Analytics, version 12.2.1.4.0. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted patches for affected products including Oracle BI Publisher.