Oracle Siebel Server < 20.3 (April 2020 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2020 CPU advisory. - Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI, SWSE. Supported versions that are affected are 20.2 and prior. Easil...

CVE-2020-2738

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI, SWSE. Supported versions that are affected are 20.2 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks o...

CVE-2020-2738

CVE-2020-2738 affects Oracle Siebel CRM’s Siebel UI Framework (component: EAI, SWSE). Affected: Siebel 20.2 and earlier; vulnerability allows a low-privilege, network-accessing (via HTTP) attacker to read a subset of data from the UI Framework. Root cause is unauthorized read access due to the vu...