CVE-2023-21924

The CVE-2023-21924 entry concerns Oracle Health Sciences InForm (Core) within Oracle Health Sciences Applications. Affected versions are prior to 6.3.1.3 and prior to 7.0.0.1. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP, with user interaction require...

CVE-2023-21925

The CVE-2023-21925 issue affects Oracle Health Sciences InForm (Core) with input validation in the Core component. Versions prior to 6.3.1.3 and prior to 7.0.0.1 are vulnerable. An unauthenticated attacker with network access via HTTP can compromise InForm, enabling partial denial of service (par...

CVE-2023-21926

The CVE concerns Oracle Health Sciences InForm (Core) in Oracle Health Sciences Applications. Affected are InForm versions prior to 6.3.1.3 and prior to 7.0.0.1. The root cause is insufficient input validation in the Core component, enabling an unauthenticated attacker with access to the InForm i...

CVE-2023-21923

The CVE-2023-21923 vulnerability affects Oracle Health Sciences InForm (Core) within Oracle Health Sciences Applications. Affected versions are prior to 6.3.1.3 and prior to 7.0.0.1. An attacker with low privileges who can reach the system over HTTP can compromise InForm, leading to unauthorized ...

CVE-2023-21921

The vulnerability CVE-2023-21921 affects Oracle Health Sciences InForm Core. Public details from multiple sources show it allows a low-privileged attacker with network access via HTTP to compromise InForm, enabling unauthorized update/insert/delete and read access to a subset of data due to insuf...

CVE-2023-21922

Summary of CVE-2023-21922 : Oracle Health Sciences InForm (Core) in Oracle Health Sciences InForm products is affected. Affected versions are prior to 6.3.1.3 and prior to 7.0.0.1. The issue allows an unauthenticated attacker with network access via HTTP, with required human interaction, to poten...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Oracle Health Sciences Applications 安全漏洞

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in the Core component of Oracle Health Sciences Applications version 6.3.1.3 and earlier and version 7.0.0.1 and earlier. A highly...

Oracle Health Sciences Applications 安全漏洞

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in the Core component of Oracle Health Sciences Applications version 6.3.1.3 and earlier and version 7.0.0.1 and earlier. A...

Oracle Health Sciences Applications 安全漏洞

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in the Core component of Oracle Health Sciences Applications version 6.3.1.3 and earlier and version 7.0.0.1 and earlier. A...

Oracle Health Sciences Applications 安全漏洞

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in the Core component of Oracle Health Sciences Applications version 6.3.1.3 and earlier and version 7.0.0.1 and earlier. An...

PT-2023-2646

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions prior to 6.3.1.3 Oracle Health Sciences InForm versions prior to 7.0.0.1 Description The issue is related to insufficient input validation in the Core component of Oracle Health Sciences InForm. It allows...

CVE-2023-21993: Undefined Security Weakness

Vulnerability in the Oracle Clinical Remote Data Capture product of Oracle Health Sciences Applications component: Forms. The supported version that is affected is 5.4.0.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Clinical...

CVE-2023-21921: Undefined Security Weakness

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2023-21926: Undefined Security Weakness

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure wher...

CVE-2023-21925: Uncontrolled Resource Consumption

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Oracle Health Sciences Applications 安全漏洞

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in the Core component of Oracle Health Sciences Applications version 6.3.1.3 and earlier and version 7.0.0.1 and earlier. An...

CVE-2023-21924: Undefined Security Weakness

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2023-21922: Improper Access Control

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2023-2645 · Oracle · Oracle Health Sciences Inform

Name of the Vulnerable Software and Affected Versions: Oracle Health Sciences InForm versions prior to 6.3.1.3 Oracle Health Sciences InForm versions prior to 7.0.0.1 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm...