PT-2013-5855 · Oracle · Oracle Health Sciences Inform

Publicado 2013-10-16 · Atualizado 2013-10-31 · CVE-2013-5857

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:N/AC:H/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions 4.5 SP3 through 4.5 SP3a-k Oracle Health Sciences InForm versions 4.6 SP0 through 4.6 SP0a-c Oracle Health Sciences InForm versions 4.6 SP1 through 4.6 SP1a-c Oracle Health Sciences InForm versions 4.6 SP2 through 4.6 SP2a-c Oracle Health Sciences InForm versions 5.0 SP0 through 5.0 SP0a Oracle Health Sciences InForm versions 5.0 SP1 through 5.0 SP1a-b

Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to the web.

Recommendations For versions 4.5 SP3 through 4.5 SP3a-k, update to a version outside of this range to resolve the issue. For versions 4.6 SP0 through 4.6 SP0a-c, update to a version outside of this range to resolve the issue. For versions 4.6 SP1 through 4.6 SP1a-c, update to a version outside of this range to resolve the issue. For versions 4.6 SP2 through 4.6 SP2a-c, update to a version outside of this range to resolve the issue. For versions 5.0 SP0 through 5.0 SP0a, update to a version outside of this range to resolve the issue. For versions 5.0 SP1 through 5.0 SP1a-b, update to a version outside of this range to resolve the issue.

Correção

Identificadores relacionados

CVE-2013-5857

Produtos afetados

Oracle Health Sciences Inform

Referências · 4

• http://osvdb.org/98491 · Nota
• http://oracle.com/technetwork/topics/security/cpuoct2013-1899837.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5857 · Nota de Segurança
• http://securityfocus.com/bid/63096 · Nota