Unauthenticated Network Vulnerability in Oracle Health Sciences InForm
CVE-2023-21925
5.3MEDIUM
Summary
A security vulnerability exists in Oracle Health Sciences InForm that allows an unauthenticated attacker with network access to potentially compromise the system via HTTP. This flaw could lead to unauthorized activities that may result in a partial denial of service. The vulnerability affects versions prior to 6.3.1.3 and 7.0.0.1, highlighting the importance of upgrading to mitigate risks associated with unauthorized access.
Affected Version(s)
Health Sciences InForm * < 6.3.1.3
Health Sciences InForm * < 7.0.0.1
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved