PT-2013-5854 · Oracle · Oracle Health Sciences Inform

Published 2013-10-16 · Updated 2013-10-31 · CVE-2013-5856

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:N/AC:H/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences InForm versions 4.5 SP3 through 4.5 SP3a-k Oracle Health Sciences InForm versions 4.6 SP0 through 4.6 SP0a-c Oracle Health Sciences InForm versions 4.6 SP1 through 4.6 SP1a-c Oracle Health Sciences InForm versions 4.6 SP2 through 4.6 SP2a-c Oracle Health Sciences InForm versions 5.0 SP0 through 5.0 SP0a Oracle Health Sciences InForm versions 5.0 SP1 through 5.0 SP1a-b Oracle Health Sciences InForm versions 5.5 SP0 through 5.5 SP0b Oracle Health Sciences InForm version 5.5.1 Oracle Health Sciences InForm version 6.0.0

Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to the web.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-5856

Affected Products

Oracle Health Sciences Inform

References · 4

• http://oracle.com/technetwork/topics/security/cpuoct2013-1899837.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5856 · Security Note
• http://securityfocus.com/bid/63099 · Note
• http://osvdb.org/98493 · Note