Unauthorized Data Access Vulnerability in Oracle Health Sciences InForm Product

CVE-2023-21923

What is CVE-2023-21923?

A vulnerability exists in the Oracle Health Sciences InForm product that allows low privileged attackers with HTTP network access to compromise the system. Affected versions, namely those prior to 6.3.1.3 and 7.0.0.1, could be exploited to create, delete, or modify critical data. This exploitation could further lead to unauthorized access to all accessible data and introduce partial denial of service scenarios. Organizations using this product need to implement appropriate patches to mitigate risks associated with potential data breaches and service disruptions.

References