CVE-2023-21922 — Improper Access Control in Corporation Health Sciences Inform

CWE-284 — Improper Access Control4 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
1.1%
top 22.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Health Sciences InformOracle Health Sciences Inform
Timeline
PublishedApr 18

Description

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Health Sciences InForm. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, …

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:NExploitability: 1.6 | Impact: 5.2

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
CVEList
CVE-2023-21922: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶
GHSA
GHSA-fxvw-v786-822p: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Health Sciences Applications Risk Matrix: Core — CVE-2023-21922↗2023-04-15
▶
CVE-2023-21922 — Improper Access Control | cvebase