Threats tagged 'ghsa-qjr9-x34h-2cp9'

A critical vulnerability exists in Oracle Forms, part of Oracle Fusion Middleware, affecting versions 12.2.1.19.0 and 14.1.2.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to potentially take over Oracle Forms, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 9.0. Oracle has released security patches addressing this and many other vulnerabilities in its September 2026 Critical Security Patch Update.