CVE-2019-2629: Medium severity oracle health sciences data management workbench vulnerability
Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications (subcomponent: User Interface). The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Health Sciences Data Management Workbench accessible data as well as unauthorized read access to a subset of Oracle Health Sciences Data Management Workbench accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-2629?
CVE-2019-2629 is a vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications that allows a low privileged attacker to access the system via HTTP.
What is the affected version of Oracle Health Sciences Data Management Workbench?
The affected version of Oracle Health Sciences Data Management Workbench is 2.4.8.
How do I exploit CVE-2019-2629?
To exploit CVE-2019-2629, an attacker would need network access via HTTP and low privileges on the Oracle Health Sciences Data Management Workbench component.
What is the severity of CVE-2019-2629?
CVE-2019-2629 has a severity rating of medium, with a CVSS score of 5.4.
Where can I find more information about CVE-2019-2629?
You can find more information about CVE-2019-2629 in the Oracle Security Advisory: http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html