PT-2013-5814 · Oracle · Oracle Health Sciences Inform

Published 2013-10-16 · Updated 2013-10-17 · CVE-2013-5811

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions 4.5 SP3 through 4.5 SP3a-k Oracle Health Sciences InForm versions 4.6 SP0 through 4.6 SP0a-c Oracle Health Sciences InForm versions 4.6 SP1 through 4.6 SP1a-c Oracle Health Sciences InForm versions 4.6 SP2 through 4.6 SP2a-c Oracle Health Sciences InForm versions 5.0 SP0 through 5.0 SP0a Oracle Health Sciences InForm versions 5.0 SP1 through 5.0 SP1a-b

Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to the web.

Recommendations For versions 4.5 SP3 through 4.5 SP3a-k, update to a version outside of this range. For versions 4.6 SP0 through 4.6 SP0a-c, update to a version outside of this range. For versions 4.6 SP1 through 4.6 SP1a-c, update to a version outside of this range. For versions 4.6 SP2 through 4.6 SP2a-c, update to a version outside of this range. For versions 5.0 SP0 through 5.0 SP0a, update to a version outside of this range. For versions 5.0 SP1 through 5.0 SP1a-b, update to a version outside of this range.

Fix

Related Identifiers

CVE-2013-5811

Affected Products

Oracle Health Sciences Inform

References · 2

• http://oracle.com/technetwork/topics/security/cpuoct2013-1899837.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5811 · Security Note