PT-2026-3673 · Oracle · Oracle Life Sciences Central Designer

Published 2026-01-20 · Updated 2026-01-21 · CVE-2026-21923

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Oracle Life Sciences Central Designer version 7.0.1.0

Description An easily exploitable issue affects Oracle Life Sciences Central Designer, allowing an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized data manipulation, including update, insert, and delete operations, as well as unauthorized read access to certain data within Oracle Life Sciences Central Designer. The affected component is the Platform.

Recommendations Update Oracle Life Sciences Central Designer from version 7.0.1.0 to a newer, secure version.

Fix

Related Identifiers

CVE-2026-21923

Affected Products

Oracle Life Sciences Central Designer

References · 4

• https://osv.dev/vulnerability/CVE-2026-21923 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21923 · Security Note
• https://oracle.com/security-alerts/cpujan2026.html · Vendor Advisory
• https://twitter.com/CVEnew/status/2013783033523122261 · Twitter Post