CVE-2023-21926

4 documents4 sources
Severity
5.5MEDIUM
EPSS
0.3%
top 47.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Health Sciences InformOracle Health Sciences Inform
Timeline
PublishedApr 18

Description

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Health Sciences InForm executes to compromise Oracle Health Sciences InForm. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vuln…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5fqc-c355-c6jg: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶
CVEList
CVE-2023-21926: Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core)↗2023-04-18
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Health Sciences Applications Risk Matrix: Core — CVE-2023-21926↗2023-04-15
▶