PT-2026-3721 · Oracle · Oracle Life Sciences Central Designer

Published 2026-01-20 · Updated 2026-01-20 · CVE-2026-21974

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Life Sciences Central Designer version 7.0.1.0

Description An easily exploitable issue affects Oracle Life Sciences Central Designer. An unauthenticated attacker with network access via HTTP can compromise the software. Successful exploitation may result in unauthorized read access to a subset of data accessible through Oracle Life Sciences Central Designer.

Recommendations Update Oracle Life Sciences Central Designer to a newer version that addresses this issue.

Fix

RCE

Information Disclosure

Weakness Enumeration

CWE-20

CWE-200

Related Identifiers

BDU:2026-01002

CVE-2026-21974

Affected Products

Oracle Life Sciences Central Designer

References · 6

• https://oracle.com/security-alerts/cpujan2026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21974 · Security Note
• https://bdu.fstec.ru/vul/2026-01002 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21974 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB20260120165 · Note
• https://twitter.com/CVEnew/status/2013740411127308608 · Twitter Post