Threats tagged 'ghsa-vpp4-7mcp-gmhv'

A vulnerability exists in Oracle Product Lifecycle Analytics version 3.6.1 related to installation issues. It allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update that addresses this and many other vulnerabilities across multiple products. Customers are strongly advised to apply the available patches promptly.