Siebel CRM Deployment vulnerabilities

Vulnerability in Oracle Siebel CRM Deployment product (component: Server Infrastructure) affects versions 17.0-25.2. An unauthenticated attacker with network access via TLS can easily compromise the system, causing a hang or frequently repeatable crash (complete DoS).

Vulnerability in Siebel CRM Deployment (component: Migration) versions 17.0-26.6. An unauthenticated attacker with network access via HTTP can compromise the system, but exploitation is difficult and requires user interaction. Successful attacks may result in full takeover of Siebel CRM Deployment.

Vulnerability in Siebel CRM Deployment (component: Migration). Affects versions 17.0-26.6. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to data and modify it. Attack may impact additional products (scope change).

Vulnerability in Siebel CRM Deployment (component: Server Infrastructure). Affects versions 17.0-26.6. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to data and modify it.

Vulnerability in Siebel CRM Deployment (component: Application Interface). Affects versions 17.0-26.6. Easily exploitable, allows unauthenticated attacker with physical access to the network segment to gain unauthorized access to data and modify it.

Vulnerability in Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Affects versions 17.0-26.6. Easily exploitable, allows low privileged attacker with logon to the infrastructure to take over Siebel CRM Deployment.