CVE-2026-34324

Oracle Life Sciences InForm (App Server) is affected in versions 7.0.1.0 and 7.0.1.1. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read and modify data, potentially enabling unauthorized updates/inserts/deletes and reading a subset of data. No exploitatio...

CVE-2025-61885

CVE-2025-61885 affects Oracle Life Sciences InForm (Oracle Health Sciences Applications) Web Server, version 7.0.1.0. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to read a subset of InForm data, with the impact limited to Confidentiality (C:L/I:N/A:N; CVSS 3....

CVE-2025-62287

CVE-2025-62287 affects Oracle Life Sciences InForm (Web Server) in Oracle Health Sciences Applications, affected version 7.0.1.0. The vulnerability allows unauthenticated network access via HTTP to compromise InForm, with attacks requiring user interaction from a non-attacker. Impact may include ...

CVE-2026-34323

The CVE affects Oracle Life Sciences InForm (IDM Authentication) in Oracle Life Sciences Applications, with affected versions 7.0.1.0 and 7.0.1.1. It is exploitable over HTTP by an unauthenticated network attacker and requires user interaction for a successful attack. Impact includes unauthorized...