Oracle Siebel CRM Integration vulnerabilities

Vulnerability in Oracle Siebel CRM Integration (component Open Integration) versions 25.12-26.9. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to gain unauthorized access to critical data.

Vulnerability in Oracle Siebel CRM Integration (component: EAI) affecting versions 17.0-26.7. A low-privileged attacker with network access via SOAP can gain unauthorized access to critical data and update, insert, or delete some data accessible in Siebel CRM Integration.

Vulnerability in Oracle Siebel CRM Integration (component: Event Publish and Subscribe) affecting versions 23.6-26.7. An unauthenticated attacker with access to the physical communication segment attached to the hardware running Siebel CRM Integration can create, delete, or modify critical data and gain full access to it.