Threats tagged 'ghsa-jh6h-ghrg-789q'

A critical vulnerability exists in Oracle Access Manager's Authentication Engine affecting versions 12.2.1.4.0 and 14.1.2.1.0. This vulnerability allows a highly privileged attacker with network access via HTTP to potentially take over Oracle Access Manager, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 9.1. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate the risk.