EUVD-2023-26088

Malicious code in bioql PyPI...

Core component Oracle Health Sciences InForm DoS Data Access

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to read, modify, add, or delete data...

CVE-2023-21924

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2023-21921

The vulnerability CVE-2023-21921 affects Oracle Health Sciences InForm Core. Public details from multiple sources show it allows a low-privileged attacker with network access via HTTP to compromise InForm, enabling unauthorized update/insert/delete and read access to a subset of data due to insuf...

CVE-2023-21925: Uncontrolled Resource Consumption

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2023-21922: Improper Access Control

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2023-21921: Undefined Security Weakness

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2023-2648 · Oracle · Oracle Health Sciences Inform

Name of the Vulnerable Software and Affected Versions: Oracle Health Sciences InForm versions prior to 6.3.1.3 Oracle Health Sciences InForm versions prior to 7.0.0.1 Description: The issue is related to insufficient input validation in the Core component of Oracle Health Sciences InForm. It allo...

PT-2023-2645 · Oracle · Oracle Health Sciences Inform

Name of the Vulnerable Software and Affected Versions: Oracle Health Sciences InForm versions prior to 6.3.1.3 Oracle Health Sciences InForm versions prior to 7.0.0.1 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm...

CVE-2023-21924: Undefined Security Weakness

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2023-21926: Undefined Security Weakness

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure wher...

CVE-2023-21923: Improper Access Control

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2023-2646

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions prior to 6.3.1.3 Oracle Health Sciences InForm versions prior to 7.0.0.1 Description The issue is related to insufficient input validation in the Core component of Oracle Health Sciences InForm. It allows...

CVE-2013-5856

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.5 SP0, 5.5 SP0b, 5.5.1, and 6.0.0 allows remote authenticated user...

PT-2013-5855

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions 4.5 SP3 through 4.5 SP3a-k Oracle Health Sciences InForm versions 4.6 SP0 through 4.6 SP0a-c Oracle Health Sciences InForm versions 4.6 SP1 through 4.6 SP1a-c Oracle Health Sciences InForm versions 4.6 SP...

PT-2013-5837

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions 4.6 SP0 through 5.0.4 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Cognos. Recommendations For Oracle Health Sciences...

PT-2013-5854

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions 4.5 SP3 through 4.5 SP3a-k Oracle Health Sciences InForm versions 4.6 SP0 through 4.6 SP0a-c Oracle Health Sciences InForm versions 4.6 SP1 through 4.6 SP1a-c Oracle Health Sciences InForm versions 4.6 SP...

PT-2013-5814

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions 4.5 SP3 through 4.5 SP3a-k Oracle Health Sciences InForm versions 4.6 SP0 through 4.6 SP0a-c Oracle Health Sciences InForm versions 4.6 SP1 through 4.6 SP1a-c Oracle Health Sciences InForm versions 4.6 SP...

CVE-2013-5811: Undefined Security Weakness

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, and 5.0 SP1a-b allows remote authenticated users to affect confidentiality via...