Oracle Siebel CRM Integration vulnerabilities

Vulnerability in Oracle Siebel CRM Integration (component Open Integration) versions 25.12-26.9. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to gain unauthorized access to critical data.

Vulnerability in Oracle Siebel CRM Integration (EAI component) affecting versions 17.0-26.9. A difficult-to-exploit HTTP attack requiring user interaction can lead to unauthorized access to critical data and modification, potentially impacting other products.

Vulnerability in Oracle Siebel CRM Integration (component: Open Integration) affecting versions 25.12-26.9. A difficult-to-exploit HTTP attack by an unauthenticated attacker requires human interaction and may impact additional products, allowing unauthorized modification and read access to a subset of data.

Vulnerability in Oracle Siebel CRM Integration (component: EAI) affecting versions 17.0-26.7. A low-privileged attacker with network access via SOAP can gain unauthorized access to critical data and update, insert, or delete some data accessible in Siebel CRM Integration.

Vulnerability in Oracle Siebel CRM Integration (component: Event Publish and Subscribe) affecting versions 23.6-26.7. An unauthenticated attacker with access to the physical communication segment attached to the hardware running Siebel CRM Integration can create, delete, or modify critical data and gain full access to it.