CVE-2022-21518

4 documents4 sources
Severity
6.5MEDIUM
EPSS
0.6%
top 31.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Health Sciences Data Management WorkbenchOracle Health Sciences Data Management Workbench
Timeline
PublishedJul 19
Latest updateJul 20

Description

Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface). Supported versions that are affected are 2.4.8.7 and 2.5.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Health Sci…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-wx2p-fvg9-w66q: Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface)↗2022-07-20
▶
CVEList
CVE-2022-21518: Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface)↗2022-07-19
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Health Sciences Applications Risk Matrix: User Interface — CVE-2022-21518↗2022-07-15
▶
CVE-2022-21518 (MEDIUM CVSS 6.5) | Vulnerability in the Oracle Health | cvebase.io