CVE-2015-2649

Oracle Siebel CRM is affected by CVE-2015-2649 in the Siebel UI Framework (subcomponent UIF Open UI). Affected versions are 8.1.1, 8.2.2, and 15.0. The vulnerability allows remote authenticated users to access a subset of Siebel UI data, impacting confidentiality via HTTPS. Attack characteristics...