Threats tagged 'ghsa-xxv8-4rmq-cvf7'

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with network access via HTTP to compromise the system. The vulnerability has a high CVSS score of 8.8, indicating significant confidentiality, integrity, and availability impacts. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate this risk.