A vulnerability exists in Oracle Life Sciences Central Coding version 7.0.1.0 that permits an unauthenticated attacker with network access via HTTP to modify or delete data and to read restricted data. The flaw compromises confidentiality and integrity, allowing unauthorized update, insert, or delete operations as well as partial disclosure of content. Though the CVSS vector indicates no authentication is required, the actual attack vector is likely through the publicly exposed HTTP interface, making the risk reachable over the network.

Oracle Corporation’s Life Sciences Central Coding platform, specifically version 7.0.1.0. No other versions or products are listed as affected.

The CVSS v3.1 base score of 6.5 denotes moderate severity, and the EPSS score of less than 1% indicates a low probability of exploitation at the time of analysis. The vulnerability is not currently listed in the CISA KEV catalog. Because the flaw allows unauthenticated network access to read or alter data, any host exposing the HTTP interface could be compromised if not mitigated, but the overall likelihood of exploitation remains low based on current evidence.