Oracle Siebel Server (April 2023 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2023 CPU advisory. - Vulnerability in the Siebel CRM product of Oracle Siebel CRM component: UI Framework. Supported versions that are affected are 23.3 and prior. Easily...

CVE-2023-21909

...

CVE-2023-21909

CVE-2023-21909 affects Oracle Siebel CRM UI Framework. Affected: Siebel CRM versions 23.3 and earlier. Vulnerability allows a low-privilege attacker with network access over HTTP to compromise data exposure across Siebel CRM. CVSS 3.1 base score 6.5 (Confidentiality impact). Remediation: Oracle C...