Network Vulnerability in Oracle Health Sciences InForm Product

CVE-2023-21924

Summary

A vulnerability has been identified in the Oracle Health Sciences InForm product, allowing high-privileged attackers with network access via HTTP to compromise the system. This security issue affects versions prior to 6.3.1.3 and 7.0.0.1. Exploiting this vulnerability necessitates human interaction from a user other than the attacker. While primarily impacting Oracle Health Sciences InForm, successful exploitation could also affect other products, potentially leading to unauthorized updates, deletions, or access to sensitive data, as well as partial denial of service conditions. It is critical for organizations utilizing this software to apply the necessary patches to safeguard against potential threats.

References