CVE-2014-4231

Oracle Siebel CRM CVE-2014-4231 affects the Siebel Travel & Transportation component (subcomponent Diary) in versions 8.1.1 and 8.2.2. The vulnerability allows remote, unauthenticated attackers to impact data integrity via unspecified vectors over HTTP, per the July 2014 CPU references. The exact...

Oracle Siebel Multiple Vulnerabilities (July 2014 CPU)

The remote Oracle Siebel install is affected by multiple unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76576; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Oracle Releases July 2014 Security Advisory

Oracle has released its Critical Patch Update for July 2014 to address 113 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 29 for Oracle Fusion Middleware 7 for Oracle Hyperion 1 for Oracle Enterprise Manager Grid Control 5...

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

Oracle Siebel 7.7/7.8 'loyalty_enu/start.swe' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38456/info Oracle Siebel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

Oracle Siebel UI Framework CVE-2014-2468 Remote Security Vulnerability (April 2014 CPU)

The remote Oracle Siebel install has an unspecified remote vulnerability in the UI Framework component that affects integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid74467; scriptversion"1.4";...

Oracle Siebel CRM Server Detection

Binary data oraclesiebelserverinstalled.nbin...

CVE-2014-2468

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to OpenUI, a different vulnerability than CVE-2014-4230...

Design/Logic Flaw

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to OpenUI, a different vulnerability than CVE-2014-4230...

CVE-2014-2468

Oracle Siebel CRM CVE-2014-2468 affects the Siebel UI Framework component Open_UI in versions 8.1.1 and 8.2.2. The issue enables unauthenticated remote modification of data via HTTP, as described in the April 2014 CPU advisory. The connected Nessus entries corroborate Open_UI as the affected subc...

CVE-2014-2468

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to OpenUI, a different vulnerability than CVE-2014-4230...

CVE-2014-0369

Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2015-0366...

CVE-2014-0370

Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Clinical Trip Report...

Information disclosure

Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2015-0366...

Design/Logic Flaw

Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Clinical Trip Report...

CVE-2014-0369

Oracle Siebel CRM is affected by CVE-2014-0369 in the Siebel Core - EAI component (Java Integration) for versions 8.1.1 and 8.2.2. The vulnerability is described as an unspecified issue that allows remote attackers to affect confidentiality via unknown vectors related to Java Integration; no expl...

CVE-2014-0370

Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Clinical Trip Report...

CVE-2014-0369

Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2015-0366...

CVE-2014-0370

CVE-2014-0370 affects Oracle Siebel CRM 8.1.1 and 8.2.2 (Siebel Life Sciences, subcomponent Clinical Trip Report). A vulnerability in that component could allow remote authenticated attackers to impact availability via HTTP, with multiple authentications required; exploitation is described as dif...

Oracle Releases January 2014 Security Advisory

Oracle has released its Critical Patch Update for January 2014 to address 144 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 22 for Oracle Fusion Middleware 2 for Oracle Hyperion 4 for Oracle E-Business Suite 16 for Oracle...