PT-2026-34145 · Oracle · Oracle Life Sciences Inform+1

Published 2026-04-21 · Updated 2026-04-26 · CVE-2026-34324

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Oracle Life Sciences InForm versions 7.0.1.0 through 7.0.1.1

Description An issue in the App Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to a subset of data, as well as unauthorized update, insert, or delete access to certain accessible data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-34324

Affected Products

Oracle Life Sciences Inform

Life Sciences Inform

References · 3

• https://oracle.com/security-alerts/cpuapr2026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34324 · Security Note
• https://twitter.com/CVEnew/status/2048546620984459482 · Twitter Post