Threats tagged 'ghsa-hqgq-xq72-j5jm'

A critical vulnerability exists in Oracle Forms, part of Oracle Fusion Middleware, affecting versions 12.2.1.19.0 and 14.1.2.0.0. This vulnerability allows a highly privileged attacker with network access via HTTP to compromise Oracle Forms, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.1. Oracle has released security patches addressing this issue as part of their September 2026 Critical Security Patch Update.