Aller au contenu
Se connecter
Non notée

CVE-2017-10049 Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent: Search)

Description

Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core CRM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Core CRM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core CRM accessible data as well as unauthorized read access to a subset of Siebel Core CRM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

Produits et versions touchés

Produit Versions touchées Corrigé en
Siebel Core - Server Framework 17.0 Pas de correctif indiqué
Siebel Core - Server Framework 16.0 Pas de correctif indiqué

Autres CVE de Siebel Core - Server Framework

Les 9 CVE de Siebel Core - Server Framework →
CVE-2021-2368 Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: Siebel Core - Server Infrastructure) 5.9 Moyenne CVE-2021-2353 Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging) 4.4 Moyenne CVE-2021-2039 Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search) 7.6 Élevée CVE-2021-2004 Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration -… 4.3 Moyenne
Suivre cette CVE