Oracle Argus Safety Exploitable Vulnerability in Health Sciences Applications

CVE-2018-2643

Summary

A vulnerability exists in the Oracle Argus Safety component of Oracle Health Sciences Applications, particularly within the Case Selection subcomponent. This flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Although the vulnerability is confined to Oracle Argus Safety, successful exploitation can lead to unauthorized updates, insertions, or deletions of data, along with unauthorized read access to a subset of accessible information. The affected versions include 7.x and 8.0.x, and it is critical for organizations to understand the potential implications on their data integrity and confidentiality.

References