Siebel CRM End User vulnerabilities

Vulnerability in Siebel CRM End User (component: Open UI) versions 17.0-26.6. A low-privileged attacker with network access via HTTPS can compromise the system, but exploitation is difficult and requires user interaction. Successful attacks may result in unauthorized modification of critical data and unauthorized access to critical data.

Vulnerability in Siebel CRM End User product of Oracle Siebel CRM (component: Search). Affects versions 17.0-26.6. Easily exploitable, allows unauthenticated attacker with access to the physical communication segment to gain unauthorized access to data, including creation, deletion or modification.

Vulnerability in Siebel CRM End User (component: Redwood UI) versions 24.4-26.3. Difficult to exploit, requires high privileges, user interaction, and network access via HTTP. Successful attack may cause partial denial of service and impact other products.