Oracle Life Sciences Empirica Signal Common Core Component Unauthorized Data Access and Modification Vulnerability

A vulnerability exists in Oracle Life Sciences Empirica Signal versions 9.2.1 through 9.2.3, within the Common Core component. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the application. While the issue is contained within Empirica Signal, it may also significantly affect other products. Successful exploitation could lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of data accessible within Empirica Signal.

Impact

Exploitation allows for unauthorized creation, deletion, or modification of critical data, along with unauthorized read access to certain data within Oracle Life Sciences Empirica Signal.