Siebel CRM Development vulnerabilities

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools) affecting versions 17.0-26.7. A difficult to exploit vulnerability allows a low privileged attacker with network access via SQL to compromise the product. Successful attacks can result in takeover of Siebel CRM Development.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces) affecting versions 17.0-26.7. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data and a partial denial of service (partial DOS).

Vulnerability in Siebel CRM Development (Siebel Approval Manager component) allows an unauthenticated attacker via HTTP to fully compromise the system.