CVE-2023-21923

CWE-284 — Improper Access Control4 documents4 sources
Severity
8.3HIGH
EPSS
0.8%
top 26.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Health Sciences InformOracle Health Sciences Inform
Timeline
PublishedApr 18

Description

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Health Sciences InForm a…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:LExploitability: 2.8 | Impact: 5.5

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5p86-7v4g-7f7r: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶
CVEList
CVE-2023-21923: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Health Sciences Applications Risk Matrix: Core — CVE-2023-21923↗2023-04-15
▶