Oracle Siebel CRM vulnerabilities

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can result in takeover of the application.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with logon to the infrastructure where the component executes. Successful attacks can result in takeover of the component.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via SQL. Successful attacks can result in takeover of the component.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can result in takeover of the component.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via SQL. Successful attacks can result in takeover of the component.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can cause a hang or frequently repeatable crash (complete DOS), unauthorized update, insert or delete access, and unauthorized read access.

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) affecting versions 17.0-26.7. Easily exploitable by an unauthenticated attacker with network access via HTTP. Successful attacks can result in unauthorized access to critical data, unauthorized data modifications, and partial DOS.

Vulnerability in Oracle Siebel CRM's Siebel Apps - Life Sciences (component: Life Sciences) affecting versions 17.0-26.7. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise the system, requiring user interaction.

Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with access to the physical communication segment can access critical data and cause hangs or repeatable crashes (DoS).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTPS can take over Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM End User product (Open UI component). Affects versions 17.0-26.7. Difficult to exploit, requires low privileges, network access via HTTP, and user interaction. Attacks may impact additional products (scope change) and lead to unauthorized creation, deletion, modification, or access to data.

Vulnerability in Oracle Siebel CRM Siebel Apps - Customer Order Management product (Order Management component). Affects versions 17.0-26.7. Easily exploitable, requires low privileges, network access via HTTP, and user interaction. Attacks may impact additional products (scope change) and lead to unauthorized creation, deletion, modification, or access to data.

Vulnerability in Oracle Siebel CRM Siebel Apps - Customer Order Management product (Order Management component). Affects versions 17.0-26.7. Easily exploitable, requires low privileges, network access via HTTP, and user interaction. Attacks may impact additional products (scope change) and lead to unauthorized creation, deletion, modification, or access to data.

Vulnerability in Oracle Siebel CRM Siebel Apps - Life Sciences product (eDetailing component). Affects versions 17.0-26.7. Easily exploitable, no authentication required, requires network access via HTTP and user interaction. Attacks may lead to unauthorized creation, deletion, modification, or access to data.

Vulnerability in Oracle Siebel CRM Deployment product (component: Installation) affects versions 17.0-26.7. A low-privileged attacker with local access to the infrastructure can easily exploit it to take over Siebel CRM Deployment. Successful attacks impact confidentiality, integrity, and availability.

Vulnerability in Siebel Apps - Marketing product of Oracle Siebel CRM. A high privileged attacker with network access via HTTP can compromise Siebel Apps - Marketing. Successful attacks can result in takeover of the component.

Vulnerability in Oracle Siebel CRM End User product (component: Document Management). Affects versions 17.0-26.6. Easily exploitable by low-privileged attacker with network access via HTTP, allowing takeover of Siebel CRM End User. CVSS 8.8.

Vulnerability in Oracle Siebel CRM Deployment product (component: Server Infrastructure). Affects versions 17.0-26.6. Easily exploitable by low-privileged attacker via HTTP, allowing takeover. CVSS 8.8.

Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.5. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or full access to all application data.

Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Siebel Server Sync for Exchange) in versions 17.0-26.5. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some Siebel CRM Integration data. CVSS 3.1 Base Score 3.7 (Integrity impact).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). Supported versions that are affected are 17.0-26.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 2.6 (Confidentiality impacts).