CVE-2023-21925

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 55.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Health Sciences InformOracle Health Sciences Inform
Timeline
PublishedApr 18

Description

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Health Sciences InForm. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Health Sciences InForm. CVS…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c492-fr35-c3wf: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶
CVEList
CVE-2023-21925: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Health Sciences Applications Risk Matrix: Core — CVE-2023-21925↗2023-04-15
▶