CVE-2022-21518: Medium severity oracle health sciences data management workbench vulnerability
Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface). Supported versions that are affected are 2.4.8.7 and 2.5.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Health Sciences Data Management Workbench accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Oracle Health Sciences Data Management Workbench vulnerability?
The vulnerability ID is CVE-2022-21518.
What is the affected software?
The affected software is Oracle Health Sciences Data Management Workbench versions 2.4.8.7 and 2.5.2.1.
How can an attacker exploit this vulnerability?
An attacker with low privileges and network access can exploit this vulnerability via HTTP.
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium (CVSS score of 6.5).
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the Oracle Security Advisory: https://www.oracle.com/security-alerts/cpujul2022.html