CVE-2026-21974

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-21974

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

V

ulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Central Designer. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Life Sciences Central Designer accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

References
Link Resource
https://www.oracle.com/security-alerts/cpujan2026.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:life_sciences_central_designer:7.0.1.0:*:*:*:*:*:*:*
History

29 Jan 2026, 14:47

Type Values Removed Values Added
First Time Oracle
Oracle life Sciences Central Designer
References () https://www.oracle.com/security-alerts/cpujan2026.html - () https://www.oracle.com/security-alerts/cpujan2026.html - Vendor Advisory
CPE cpe:2.3:a:oracle:life_sciences_central_designer:7.0.1.0:*:*:*:*:*:*:*

21 Jan 2026, 15:16

Type Values Removed Values Added
CWE CWE-200

20 Jan 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-20 22:16

Updated : 2026-01-29 14:47

NVD link : CVE-2026-21974

Mitre link : CVE-2026-21974

CVE.ORG link : CVE-2026-21974

JSON object : View

Products Affected

oracle

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor