CVE-2014-2485

Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality via unknown vectors related to Integration Business Services...

Design/Logic Flaw

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491...

Design/Logic Flaw

Unspecified vulnerability in the Siebel Travel & Transportation component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Diary...

Design/Logic Flaw

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to OpenUI, a different vulnerability than CVE-2014-2468...

Design/Logic Flaw

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-4205...

Design/Logic Flaw

Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality via unknown vectors related to Integration Business Services...

CVE-2014-2491

Affected product: Oracle Siebel CRM (Siebel UI Framework, Portal Framework subcomponent). Vulnerable versions: 8.1.1 and 8.2.2. Issue: a design/logic vulnerability in the Siebel UI Framework Portal Framework that allows successful unauthenticated network access via HTTP, enabling unauthorized upd...

CVE-2014-2491

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-4205...

CVE-2014-4205

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491...

CVE-2014-4231

Unspecified vulnerability in the Siebel Travel & Transportation component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Diary...

CVE-2014-4230

CVE-2014-4230 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel UI Framework component Open_UI. The flaw, described as an unspecified vulnerability in Open_UI, enables remote, unauthenticated network attacks that can impact data integrity. The NVD entry lists a CVSS v2 base score...

CVE-2014-4205

Oracle Siebel CRM 8.1.1/8.2.2 are affected by CVE-2014-4205 in the Siebel UI Framework Portal Framework. The Nessus entry notes a difficult-to-exploit vulnerability that permits unauthenticated network access via HTTP and can lead to unauthorized update/insert/delete of data in Siebel UI Framewor...

CVE-2014-2485

Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality via unknown vectors related to Integration Business Services...

CVE-2014-4231

Oracle Siebel CRM CVE-2014-4231 affects the Siebel Travel & Transportation component (subcomponent Diary) in versions 8.1.1 and 8.2.2. The vulnerability allows remote, unauthenticated attackers to impact data integrity via unspecified vectors over HTTP, per the July 2014 CPU references. The exact...

CVE-2014-2485

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by multiple vulnerabilities reported in the July 2014 CPU, including issues in the Siebel Travel & Transportation component (Diary) and Siebel UI Framework components (Open_UI and Portal Framework). The Nessus entry indicates these vulnerabilities al...

CVE-2014-4230

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to OpenUI, a different vulnerability than CVE-2014-2468...

Oracle Siebel Multiple Vulnerabilities (July 2014 CPU)

The remote Oracle Siebel install is affected by multiple unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76576; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Oracle Releases July 2014 Security Advisory

Oracle has released its Critical Patch Update for July 2014 to address 113 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 29 for Oracle Fusion Middleware 7 for Oracle Hyperion 1 for Oracle Enterprise Manager Grid Control 5...

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

Oracle Siebel 7.7/7.8 'loyalty_enu/start.swe' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38456/info Oracle Siebel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...