Improper input validation in Oracle Smart View for Office - CVE-2023-29081

Vulnerability identifier: #VU88661

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-29081

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the Authentication (InstallShield) component in Oracle Smart View for Office. A local authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

Oracle Smart View for Office
Infrastructure Technology
Oracle Hyperion Data Relationship Management
Oracle Life Sciences Central Coding
Oracle Communications ASAP
MyDell
Hyperion Financial Close Management
Oracle WebCenter Content
Oracle Documaker
Dell Precision Optimizer

Install updates from vendor's website.

MyDell - update to 3.2.308.1
Dell Precision Optimizer - update to 4.2.2.0

• https://www.oracle.com/security-alerts/cpuapr2024.html

• Improper input validation in Oracle Smart View for Office
• Dell Optimizer update for InstallShield
• Improper input validation in MyDell
• Multiple vulnerabilities in Oracle Communications ASAP
• Multiple vulnerabilities in Oracle WebCenter Content
• Multiple vulnerabilities in Oracle Documaker
• Improper input validation in Infrastructure Technology
• Improper input validation in Hyperion Financial Close Management
• Improper input validation in Oracle Hyperion Data Relationship Management
• Multiple vulnerabilities in Oracle Life Sciences Central Coding