Threats tagged 'ghsa-hvrx-j44g-wrvh'

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly.