6.5
Medium
CVE-2023-21909 Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework)
Description
Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported versions that are affected are 23.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Siebel UI Framework | Versions not published |
References
- Oracle Advisory www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of Siebel UI Framework
The 15 CVEs of Siebel UI Framework →
CVE-2020-14531
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server)
5.9
Medium
CVE-2020-2738
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE)
4.3
Medium
CVE-2020-2564
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI)
5.3
Medium
CVE-2020-2560
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server)
4.7
Medium