PT-2013-5835

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects the confidentiality, integrity, and availability of the system. It is related to the Open UI component in the Siebel UI Framework. Recommendations For Oracle Siebel C...

PT-2013-5800

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to Web Services in the Siebel Core - EAI component. Recommendation...

PT-2013-4677

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to Web Services in the Siebel Core - EAI component. Recommendations For Oracle...

PT-2013-4676

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Web Services in the Siebel Core - EAI component. Recommendations For...

Oracle Releases October 2013 Security Advisory

Oracle has released its Critical Patch Update for October 2013 to address 127 vulnerabilities across multiple products. This update contains the following security fixes: 2 for Oracle Database Server 17 for Oracle Fusion Middleware 4 for Oracle Enterprise Manager Grid Control 1 for Oracle...

CVE-2013-2413

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services...

CVE-2013-2403

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-0416...

CVE-2013-2398

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Open UI Client...

CVE-2013-2399

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

Code injection

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services...

Code injection

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-0416...

Code injection

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

Design/Logic Flaw

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Open UI Client...

CVE-2013-2399

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

CVE-2013-2413

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services...

CVE-2013-2399

CVE-2013-2399 affects Oracle Siebel CRM 8.1.1/8.2.2, specifically the Siebel Call Center component (Email - COMM Server Components). The Nessus entry notes this vulnerability allows authenticated network attackers to read a subset of Siebel Call Center data. The public documents do not provide ex...

CVE-2013-2413

CVE-2013-2413 affects Oracle Siebel CRM 8.1.1 and 8.2.2 in the Siebel Enterprise Application Integration component (Web Services). The Nessus entry specifies a difficult-to-exploit, authenticated network vulnerability over HTTP that can cause unauthorized read/update/delete operations on Siebel E...

CVE-2013-2398

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Open UI Client...

CVE-2013-2398

Summary: CVE-2013-2398 affects Oracle Siebel CRM 8.1.1 and 8.2.2 through the Siebel UI Framework (Open UI Client) and is detailed in the April 2013 CPU. What is vulnerable: Siebel UI Framework/Open UI Client component in Siebel CRM; authenticated remote attacker can exploit via HTTP to perform un...

CVE-2013-2403

Oracle Siebel CRM Known Issue (CVE-2013-2403): In Siebel Enterprise Application Integration/Web Services, versions 8.1.1 and 8.2.2 are affected by a vulnerability that can enable authenticated network attackers to read data via HTTP. The Nessus entry describes it as a difficult-to-exploit vulnera...