Oracle Siebel CRM (July 2014 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2014 CPU advisory. - Vulnerability in the Siebel Travel & Transportation component of Oracle Siebel CRM subcomponent: Diary. Supported versions that are affected are...

CVE-2014-4205

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491...

CVE-2014-2491

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-4205...

Design/Logic Flaw

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491...

CVE-2014-2491

Affected product: Oracle Siebel CRM (Siebel UI Framework, Portal Framework subcomponent). Vulnerable versions: 8.1.1 and 8.2.2. Issue: a design/logic vulnerability in the Siebel UI Framework Portal Framework that allows successful unauthenticated network access via HTTP, enabling unauthorized upd...