Threats tagged 'ghsa-qwjm-2635-c334'

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with network access via HTTP to potentially take over the system. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Exploitation is considered difficult due to the required conditions. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes.