Authentication Weakness in Oracle Life Sciences InForm by Oracle

CVE-2026-34323

What is CVE-2026-34323?

The vulnerability identified in Oracle Life Sciences InForm allows an unauthenticated attacker with network access to compromise the application. Affected versions, 7.0.1.0 and 7.0.1.1, may lead to unauthorized updates, inserts, or deletions of accessible data. Additionally, attackers can gain unauthorized read access to certain data and can trigger a partial denial of service (DoS) condition. Exploitation of this flaw necessitates human interaction from a third-party user, which increases the attack surface significantly while impacting data confidentiality, integrity, and availability.

References