Oracle Siebel Crm vulnerabilities

78 known vulnerabilities affecting oracle/siebel_crm.

Total CVEs

78

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM68LOW9

Vulnerabilities

Page 1 of 4

CVE-2023-21909MEDIUMCVSS 6.5≤ 23.32023-04-18

CVE-2023-21909 [MEDIUM] CVE-2023-21909: Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported v Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported versions that are affected are 23.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized access to critical data or

CVE-2021-2368MEDIUMCVSS 5.9≤ 21.52021-07-21

CVE-2021-2368 [MEDIUM] CVE-2021-2368: Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: Siebel Core - Server Infras Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: Siebel Core - Server Infrastructure). Supported versions that are affected are 21.5 and Prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized ac

CVE-2019-2965HIGHCVSS 7.5≤ 19.82019-10-16

CVE-2019-2965 [HIGH] CVE-2019-2965: Vulnerability in the Siebel Core - DB Deployment and Configuration product of Oracle Siebel CRM (com Vulnerability in the Siebel Core - DB Deployment and Configuration product of Oracle Siebel CRM (component: Install - Configuration). Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - DB Deployment and Configuration. Successful attack

CVE-2019-2570MEDIUMCVSS 4.7v19.32019-04-23

CVE-2019-2570 [MEDIUM] CVE-2019-2570: Vulnerability in the Siebel Core - Server BizLogic Script component of Oracle Siebel CRM (subcompone Vulnerability in the Siebel Core - Server BizLogic Script component of Oracle Siebel CRM (subcomponent: Integration - Scripting). The supported version that is affected is 19.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Core - Server BizLogic Script. Successful attacks of this vulnerabil

CVE-2015-4841MEDIUMCVSS 4.3vip2014vip20152015-10-21

CVE-2015-4841 [MEDIUM] CVE-2015-4841: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM IP201 Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM IP2014 and IP2015 allows remote attackers to affect confidentiality via unknown vectors related to Services.

CVE-2015-2587MEDIUMCVSS 4.3v8.1.1v8.2.2+1 more2015-07-16

CVE-2015-2587 [MEDIUM] CVE-2015-2587: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, an Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect integrity via vectors related to SWSE Server Infrastructure.

CVE-2015-2612MEDIUMCVSS 4.3v8.1.1v8.2.2+1 more2015-07-16

CVE-2015-2612 [MEDIUM] CVE-2015-2612: Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect confidentiality via vectors related to LDAP Security Adapter.

CVE-2015-2600LOWCVSS 3.5v8.1.1v8.2.2+1 more2015-07-16

CVE-2015-2600 [LOW] CVE-2015-2600: Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

CVE-2015-2649LOWCVSS 3.5v8.1.1v8.2.2+1 more2015-07-16

CVE-2015-2649 [LOW] CVE-2015-2649: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.22, and Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.22, and 15.0 allows remote authenticated users to affect confidentiality via vectors related to UIF Open UI.

CVE-2015-0502MEDIUMCVSS 4.3v8.1.1v8.2.22015-04-16

CVE-2015-0502 [MEDIUM] CVE-2015-0502: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1 and 8.2 allo Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1 and 8.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework.

CVE-2015-0369MEDIUMCVSS 4.3v8.1.1v8.2.22015-01-21

CVE-2015-0369 [MEDIUM] CVE-2015-0369: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to AX/HI Web UI.

CVE-2015-0366MEDIUMCVSS 5.0v8.1.1v8.2.22015-01-21

CVE-2015-0366 [MEDIUM] CVE-2015-0366: Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 al Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2014-0369.

CVE-2015-0417MEDIUMCVSS 4.0v8.1.1v8.2.22015-01-21

CVE-2015-0417 [MEDIUM] CVE-2015-0417: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0388.

CVE-2015-0363MEDIUMCVSS 4.0v8.1.1v8.2.22015-01-21

CVE-2015-0363 [MEDIUM] CVE-2015-0363: Unspecified vulnerability in the Siebel Core EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allo Unspecified vulnerability in the Siebel Core EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Integration Business Services.

CVE-2015-0398MEDIUMCVSS 4.0v8.1.1v8.2.22015-01-21

CVE-2015-0398 [MEDIUM] CVE-2015-0398: Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Clinical Trip Report.

CVE-2014-6596MEDIUMCVSS 4.3v8.1.1v8.2.22015-01-21

CVE-2014-6596 [MEDIUM] CVE-2014-6596: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework.

CVE-2015-0387MEDIUMCVSS 4.0v8.1.1v8.2.22015-01-21

CVE-2015-0387 [MEDIUM] CVE-2015-0387: Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1 Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Security - LDAP Security Adapter.

CVE-2015-0425MEDIUMCVSS 4.3v8.1.1v8.2.22015-01-21

CVE-2015-0425 [MEDIUM] CVE-2015-0425: Unspecified vulnerability in the Oracle Enterprise Asset Management component in Oracle Siebel CRM 8 Unspecified vulnerability in the Oracle Enterprise Asset Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Siebel Core - Unix/Windows.

CVE-2015-0388MEDIUMCVSS 4.0v8.1.1v8.2.22015-01-21

CVE-2015-0388 [MEDIUM] CVE-2015-0388: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0417.

CVE-2015-0419MEDIUMCVSS 4.3v8.1.1v8.2.22015-01-21

CVE-2015-0419 [MEDIUM] CVE-2015-0419: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2013-1510.