CVE-2019-2629
First published: Tue Apr 23 2019(Updated: )
Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications (subcomponent: User Interface). The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Health Sciences Data Management Workbench accessible data as well as unauthorized read access to a subset of Oracle Health Sciences Data Management Workbench accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
Credit: secalert_us@oracle.com secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Health Sciences Data Management Workbench | =2.4.8 | |
| =2.4.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-2629?
CVE-2019-2629 is a vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications that allows a low privileged attacker to access the system via HTTP.
What is the affected version of Oracle Health Sciences Data Management Workbench?
The affected version of Oracle Health Sciences Data Management Workbench is 2.4.8.
How do I exploit CVE-2019-2629?
To exploit CVE-2019-2629, an attacker would need network access via HTTP and low privileges on the Oracle Health Sciences Data Management Workbench component.
What is the severity of CVE-2019-2629?
CVE-2019-2629 has a severity rating of medium, with a CVSS score of 5.4.
Where can I find more information about CVE-2019-2629?
You can find more information about CVE-2019-2629 in the Oracle Security Advisory: http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- collector/nvd-index
- agent/type
- agent/severity
- agent/remedy
- agent/references
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/oracle
- canonical/oracle health sciences data management workbench
- version/oracle health sciences data management workbench/2.4.8