PT-2010-3989

Name of the Vulnerable Software and Affected Versions Oracle Siebel Suite versions 7.7.2.12 through 8.1.1.3 Description The issue affects the confidentiality, integrity, and availability of the system, allowing remote authenticated users to exploit it via unknown vectors. Recommendations For...

PT-2010-4864

Name of the Vulnerable Software and Affected Versions Oracle Siebel Suite versions 7.7.2.12 through 8.1.1.3 Description The issue affects the confidentiality, integrity, and availability of the system, but the specific vectors used for exploitation are unknown. It is a distinct issue from other...

CVE-2010-3500: Undefined Security Weakness

Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than...

CVE-2010-2405: Undefined Security Weakness

Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than...

CVE-2010-2406: Undefined Security Weakness

Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors...

Oracle Releases Critical Patch for October 2010

Oracle has released its Critical Patch Update for October 2010 to address 85 vulnerabilities across multiple products. This update contains the following security fixes: 7 for Oracle Database Server 8 for Oracle Fusion Middleware 1 for Oracle Enterprise Manager Grid Control 6 for Oracle E-Busines...

PT-2010-4866

Name of the Vulnerable Software and Affected Versions Oracle Siebel Suite versions 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors. Recommendations For Oracle Siebel Suite version...

PT-2010-3990

Name of the Vulnerable Software and Affected Versions Oracle Siebel Suite versions 7.7.2.12 through 8.1.1.3 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors. Recommendations For versions 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3,...

CVE-2010-3502: Undefined Security Weakness

Unspecified vulnerability in the Siebel Core component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2009-3737

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

Design/Logic Flaw

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2009-3737

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2009-3737

CVE-2009-3737 concerns Oracle Siebel Option Pack for IE ActiveX control. The vulnerability stems from improper memory initialization in the NewBusObj method, enabling remote code execution via a crafted HTML document. CERT and Red Hat entries corroborate remote execution potential and provide mit...

CVE-2009-3737: Improper Control of Generation of Code

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

Oracle Siebel Option Pack for IE ActiveX控件内存初始化漏洞

CVE ID: CVE-2009-3737 Siebel Option Pack for IE是Oracle Siebel CRM软件所提供的ActiveX控件。 Siebel Option Pack for IE ActiveX控件没有正确地初始化由NewBusObj方式所使用的内存，用户受骗访问了恶意网页并用特制参数调用该方式就可能导致执行任意代码。 Oracle Siebel Option Pack for IE 7.x 临时解决方法： 将以下文本保存为.REG文件并导入： Windows Registry Editor Version 5.00...

Oracle Siebel Option Pack for IE ActiveX control memory initialization vulnerability

Overview The Oracle Siebel Option Pack for IE ActiveX control fails to properly initialize memory, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Siebel Option Pack for IE is an ActiveX control that is provided by Oracle Siebel...

Oracle Siebel 7.x CRM (7.7, 7.8 tested) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= Oracle Siebel 7.x CRM 7.7, 7.8 tested XSS Vulnerability ========================================================= ===================== I. BACKGROUND ===================== Siebel...

Oracle Siebel 7.x CRM Cross Site Scripting Vulnerability

======================================================= Yaniv Miron aka "Lament" Advisory Feb 27, 2010 Oracle Siebel 7.x CRM 7.7, 7.8 tested Cross Site Scripting Vulnerability ======================================================= ===================== I. BACKGROUND ===================== Siebel...

Oracle Siebel 7.x CRM Cross Site Scripting

======================================================= Yaniv Miron aka "Lament" Advisory Feb 27, 2010 Oracle Siebel 7.x CRM 7.7, 7.8 tested Cross Site Scripting Vulnerability ======================================================= ===================== I. BACKGROUND ===================== Siebel...

Oracle Siebel 7.77.8 - loyalty_enustart.swe Cross-Site Scripting

Oracle Siebel 7.77.8 - loyaltyenustart.swe Cross-Site Scripting source: https://www.securityfocus.com/bid/38456/info Oracle Siebel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...