Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-54717
HistoryJul 22, 2021 - 12:00 a.m.

Oracle Siebel CRM Unauthorized Access Vulnerability

2021-07-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
oracle
siebel crm
unauthorized access
vulnerability
customer relationship management
javascript
security
data breach.

EPSS

0.002

Percentile

57.1%

Oracle Siebel CRM is a customer relationship management solution from Oracle Corporation that includes modules for sales management, marketing management, customer service systems, call centers, etc. Siebel UI Framework is one of the framework components based on the JavaScript language. A security vulnerability exists in the Siebel Core - Server Infrastructure component of CRM 21.5 and earlier versions. An attacker could exploit this vulnerability to gain unauthorized access to critical data or full access to all data accessible to the product.

EPSS

0.002

Percentile

57.1%