PT-2025-4291 · Oracle · Oracle Life Sciences Argus Safety

Marco Nappi · Published 2025-01-21 · Updated 2025-04-29 · CVE-2025-21570

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Oracle Life Sciences Argus Safety version 8.2.3

Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Argus Safety. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products. This can result in unauthorized update, insert, or delete access to some of Oracle Life Sciences Argus Safety's accessible data, as well as unauthorized read access to a subset of Oracle Life Sciences Argus Safety's accessible data.

Recommendations For version 8.2.3, update to a version that contains a fix for this issue, as the current version is affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-21570

Affected Products

Oracle Life Sciences Argus Safety

References · 7

• https://oracle.com/security-alerts/cpujan2025.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21570 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21570 · Security Note
• https://twitter.com/dailycve/status/1917333925996945885 · Twitter Post
• https://t.me/cvedetector/16011 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1881821083982065993 · Twitter Post
• https://twitter.com/CVEnew/status/1881821713589219408 · Twitter Post