The vulnerability allows an unauthenticated attacker with network access to the Oracle Life Sciences Central Designer application over HTTP to modify, insert, or delete data, as well as read protected data. This results in confidentiality and integrity impacts for the data accessible through the application. The flaw does not provide direct remote code execution or denial of service, but compromise of data can lead to severe business and regulatory implications.

Oracle Life Sciences Central Designer, version 7.0.1.0, part of Oracle Health Sciences Applications, is the only product explicitly listed as affected. No other versions or products are documented in the CVE data.

The CVSS v3.1 base score of 6.5 indicates a moderate severity with low impact on availability and low to moderate confidentiality and integrity impacts. The EPSS score is less than 1%, suggesting a very low likelihood that the vulnerability is actively exploited in the wild. The vulnerability is not listed in the CISA KEV catalog, indicating it has not been identified as a known exploited vulnerability. The likely attack vector is an unauthenticated HTTP connection; an attacker would exploit the flaw remotely and does not require special credentials or elevated privileges to alter application data.