Oracle Siebel CRM End User vulnerabilities

Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. An unauthenticated attacker with network access via SOAP can modify or delete data and gain access to all data accessible in the system.

Vulnerability in Oracle Siebel CRM End User (component: Communications Panel/Dashboard) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized update, insert or delete access to some data.

Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data accessible in Siebel CRM End User.

Vulnerability in Oracle Siebel CRM End User (component: Reports) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all data accessible in Siebel CRM End User.