Code injection

2017-10-1917:29:00

PRIOn knowledge base

www.prio-n.com

3.7 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.3%

JSON

Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM (subcomponent: Siebel Business Service Issues). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Desktop. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Desktop accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

CPENameOperatorVersion
siebel_customer_relationship_management_desktopeq16.0
siebel_customer_relationship_management_desktopeq17.0

CPE	Name	Operator	Version
	siebel_customer_relationship_management_desktop	eq	16.0
	siebel_customer_relationship_management_desktop	eq	17.0

References

www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

www.securityfocus.com/bid/101400