Threats tagged 'ghsa-qv7h-qpq3-pm48'

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes. Customers are strongly advised to apply the available patches promptly to mitigate the risk.