Threats tagged 'ghsa-vv3j-hh67-rj4f'

A critical vulnerability exists in Oracle WebLogic Server's TopLink Integration component affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. This vulnerability allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle WebLogic Server. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.9. Oracle has released security patches addressing this and many other vulnerabilities in its September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.