CVE-2023-21924

4 documents4 sources
Severity
5.9MEDIUM
EPSS
0.2%
top 60.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Health Sciences InformOracle Health Sciences Inform
Timeline
PublishedApr 18

Description

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Health Sciences InForm, attacks may sign…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:LExploitability: 1.7 | Impact: 3.7

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
CVEList
CVE-2023-21924: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶
GHSA
GHSA-4w8m-m9vr-qjm9: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Health Sciences Applications Risk Matrix: Core — CVE-2023-21924↗2023-04-15
▶