4.3
Medium
CVE-2020-2738 Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE)
Description
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE). Supported versions that are affected are 20.2 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Siebel UI Framework | Versions not published |
References
- www.oracle.com www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of Siebel UI Framework
The 15 CVEs of Siebel UI Framework →
CVE-2023-21909
Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework)
6.5
Medium
CVE-2020-14531
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server)
5.9
Medium
CVE-2020-2564
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI)
5.3
Medium
CVE-2020-2560
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server)
4.7
Medium