Oracle Life Sciences InForm Web Server Unauthenticated Data Access and Modification Vulnerability

A vulnerability has been identified in Oracle Life Sciences InForm version 7.0.1.0, within the Web Server component. This easily exploitable issue allows an unauthenticated attacker with network access via HTTP to compromise the application. Successful exploitation requires human interaction from a third party. While the vulnerability resides in Oracle Life Sciences InForm, its impact may extend to other products, leading to a scope change. Exploitation of this vulnerability could result in unauthorized access to, and modification of, certain accessible data within Oracle Life Sciences InForm.

Impact

Exploitation of this vulnerability could allow for unauthorized read, update, insert, or delete access to some data accessible through Oracle Life Sciences InForm.