CVE-2014-4231

Oracle Siebel CRM CVE-2014-4231 affects the Siebel Travel & Transportation component (subcomponent Diary) in versions 8.1.1 and 8.2.2. The vulnerability allows remote, unauthenticated attackers to impact data integrity via unspecified vectors over HTTP, per the July 2014 CPU references. The exact...

CVE-2014-4205

Oracle Siebel CRM 8.1.1/8.2.2 are affected by CVE-2014-4205 in the Siebel UI Framework Portal Framework. The Nessus entry notes a difficult-to-exploit vulnerability that permits unauthenticated network access via HTTP and can lead to unauthorized update/insert/delete of data in Siebel UI Framewor...

CVE-2014-2485

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by multiple vulnerabilities reported in the July 2014 CPU, including issues in the Siebel Travel & Transportation component (Diary) and Siebel UI Framework components (Open_UI and Portal Framework). The Nessus entry indicates these vulnerabilities al...

CVE-2014-4205: Undefined Security Weakness

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491...

CVE-2014-4231: Undefined Security Weakness

Unspecified vulnerability in the Siebel Travel & Transportation component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Diary...

CVE-2014-4250: Undefined Security Weakness

Unspecified vulnerability in the Siebel Core - Server OM Frwks component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Object Manager...

CVE-2014-2491: Undefined Security Weakness

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-4205...

CVE-2014-4230: Undefined Security Weakness

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to OpenUI, a different vulnerability than CVE-2014-2468...

Oracle Siebel Multiple Vulnerabilities (July 2014 CPU)

The remote Oracle Siebel install is affected by multiple unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76576; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

PT-2014-5762

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 and 8.2.2 Description The issue affects confidentiality and is related to the Object Manager in the Siebel Core - Server OM Frwks component. It can be exploited by remote authenticated users via unknown vectors...

PT-2014-4729

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects confidentiality and is related to Integration Business Services in the Siebel Core - EAI component. It allows local users to exploit the vulnerability via unknown...

PT-2014-5735

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 and 8.2.2 Description The issue affects the integrity of the system, related to the Portal Framework in the Siebel UI Framework component. The exact vectors of the attack are unknown. Recommendations For Oracle...

PT-2014-4734

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 and 8.2.2 Description The issue affects the integrity of the system, related to the Portal Framework in the Siebel UI Framework component. It is exploited via unknown vectors. Recommendations For Oracle Siebel...

PT-2014-5749

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 and 8.2.2 Description The issue affects the integrity of the system, related to the Open UI component in the Siebel UI Framework. Recommendations For Oracle Siebel CRM version 8.1.1, at the moment, there is no...

CVE-2014-2485: Undefined Security Weakness

Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality via unknown vectors related to Integration Business Services...

PT-2014-5750

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects the integrity of the system, related to the Diary component in the Siebel Travel & Transportation module. The exact nature of the attack vector is not specified...

Oracle Releases July 2014 Security Advisory

Oracle has released its Critical Patch Update for July 2014 to address 113 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 29 for Oracle Fusion Middleware 7 for Oracle Hyperion 1 for Oracle Enterprise Manager Grid Control 5...

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

Oracle Siebel 7.7/7.8 'loyalty_enu/start.swe' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38456/info Oracle Siebel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

Oracle Siebel UI Framework CVE-2014-2468 Remote Security Vulnerability (April 2014 CPU)

The remote Oracle Siebel install has an unspecified remote vulnerability in the UI Framework component that affects integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid74467; scriptversion"1.4";...