User Interface Vulnerability in Oracle Health Sciences Applications

CVE-2019-2629

What is CVE-2019-2629?

A vulnerability exists in the User Interface component of the Oracle Health Sciences Data Management Workbench, allowing low-privileged attackers with network access via HTTP to compromise the system. Successful exploitation may lead to unauthorized access, enabling attackers to manipulate data, including updating, inserting, or deleting accessible information. Additionally, the vulnerability can allow for unauthorized reading of specific data sets, which compromises both confidentiality and integrity.

References