Oracle Health Sciences Inform vulnerabilities

8 CVEs affecting Oracle Health Sciences Inform, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-21926, published 2023-04-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability, published 2020-04-29. Medium severity, CVSS 6.1. Actively exploited: in CISA KEV since 2025-01-23. EPSS: 84.9% chance of exploitation in the next 30 days. In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation…
CVE-2021-45105, published 2021-12-18. Medium severity, CVSS 5.9. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over…
CVE-2023-21925, published 2023-04-18. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1.…
CVE-2023-21923, published 2023-04-18. High severity, CVSS 8.3. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1.…
CVE-2023-21922, published 2023-04-18. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1.…
CVE-2023-21921, published 2023-04-18. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1.…
CVE-2023-21924, published 2023-04-18. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1.…
CVE-2023-21926, published 2023-04-18. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1.…