Oracle Siebel CRM vulnerabilities

Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data, but requires user interaction.

Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data without user interaction.

Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to read a subset of data without authorization.

Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.

Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.

Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access, with user interaction, to perform unauthorized modification and read access to some data, potentially impacting additional products.

Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can perform unauthorized modification and read access to some data.

Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3-26.9. An easily exploitable flaw allows a low-privileged attacker with local access to read a subset of data without authorization.

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability, but successful attacks require human interaction. This can result in unauthorized update, insert or delete access to some Siebel Apps - Marketing accessible data.

Vulnerability in Oracle Siebel CRM Deployment (component: Cloud Gateway). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM End User (component: Portal Framework). An unauthenticated attacker with network access via HTTPS can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). A low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can exploit this difficult-to-exploit vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with logon to the infrastructure can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in Oracle Siebel CRM End User (component: UIF Open UI). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM End User.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). A low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via TLS can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and unauthorized update, insert or delete some data.

Vulnerability in Oracle Siebel Apps - Life Sciences (component: eDetailing). A low-privileged attacker with network access via SQL can take over Siebel Apps - Life Sciences.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). A high privileged attacker with logon to the infrastructure where Siebel CRM Development executes can easily exploit this vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM (component: Web UI) affects versions 17.0-26.9. A low-privileged attacker with network access via HTTP can exploit it with user interaction, potentially impacting additional products.

Vulnerability in Oracle Siebel CRM (component: Email Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly update, insert, or delete data and read a subset of data; potential impact on other products (scope change).

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTPS can unauthorizedly update, insert, or delete data and read a subset of data.

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. A low-privileged attacker with logon to the infrastructure can unauthorizedly create, delete, or modify critical or all data.

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly update, insert, or delete data and read a subset of data; potential impact on other products (scope change).

Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). An unauthenticated attacker with network access via HTTP can exploit this vulnerability, but it requires human interaction from a person other than the attacker. Successful attacks may result in unauthorized update, insert, or delete access to some Marketing-accessible data.

Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data or all Marketing-accessible data.

Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). An unauthenticated attacker with network access via HTTP can exploit this vulnerability, which requires human interaction and may significantly impact additional products (scope change). Successful attacks may result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle Siebel Apps - Customer Order Management (component: Order Management). A low-privileged attacker with network access via HTTP, requiring user interaction, can cause unauthorized update, insert or delete access, unauthorized read access to a subset of data, and partial denial of service.

Vulnerability in Oracle Siebel CRM End User (component: Open UI). An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert or delete access and unauthorized read access to a subset of data.

Vulnerability in the Siebel CRM End User product (Open UI component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or all accessible data.

Vulnerability in the Siebel Apps - Financial Services product (Financial Accounts component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical data and to update, insert or delete some accessible data.

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical data and to update, insert or delete some accessible data.

Vulnerability in the Siebel CRM End User product (Open UI component) of Oracle Siebel CRM. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to perform unauthorized update, insert or delete of data, requiring user interaction.

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or all accessible data.

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to cause a hang or repeatable crash (DoS) as well as unauthorized modification and read access to some data.

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to perform unauthorized creation, deletion or modification of critical data and unauthorized access to all accessible data.

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to perform unauthorized creation, deletion or modification of critical data.

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to cause a hang or repeatable crash (DoS) of the system.

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged network attacker via HTTP to perform unauthorized creation, deletion or modification of critical data.

Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to read a subset of data without authorization.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can create, delete or modify critical data, gain unauthorized access to it, and cause a partial denial of service.

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows a high-privileged attacker with infrastructure logon to update, insert or delete data, read a subset of data, and cause a partial denial of service.

Vulnerability in Oracle Siebel CRM (component: Email Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly access critical or all data and update, insert, or delete data.

Vulnerability in Siebel Apps - Marketing (Email Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to cause a partial denial of service.

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with infrastructure logon to cause a partial denial of service.

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with infrastructure logon to cause a partial denial of service.

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via SMTP can cause partial DOS.

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows a high-privileged attacker with HTTP network access to read a subset of application data.

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can unauthorizedly update, insert, or delete data.