Threats tagged 'ghsa-w3x5-mxvq-293h'

A vulnerability in Oracle BI Publisher (part of Oracle Analytics) allows unauthenticated network attackers to gain unauthorized access to critical data, modify some data, or cause partial denial of service. The affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. The vulnerability has a high CVSS 3.1 score of 8.6, indicating significant confidentiality, integrity, and availability impacts. Oracle has released patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.