CVE-2019-2935

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of thi...

Code injection

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of thi...

CVE-2019-2935

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of thi...

CVE-2019-2935

Oracle Siebel CRM Siebel UI Framework (EAI) is affected by CVE-2019-2935. Affected are versions 19.8 and prior. The vulnerability enables unauthenticated attackers over HTTP to read a subset of Siebel UI Framework data. The CVSS 3.1 base score is 5.3 (medium). The connected documents do not provi...

CVE-2019-2935: Undefined Security Weakness

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of thi...

PT-2019-3713

Name of the Vulnerable Software and Affected Versions Siebel UI Framework versions prior to 19.8 Description The issue is related to inadequate access control in the Siebel UI Framework component of Oracle Siebel CRM. This can be exploited by a remote attacker to gain unauthorized access to...

Code injection

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

CVE-2019-2857

CVE-2019-2857 affects Oracle Siebel CRM’s UIF Open UI under the Siebel UI Framework. Affected version set is 19.0 and prior. The vulnerability enables a low‑privileged actor who can reach the server over HTTP to access and potentially modify data within the Siebel UI Framework, with the attacker ...

CVE-2019-2857

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

PT-2019-16544

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 19.0 and prior Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Siebel UI Framework component. Successful attacks require human interaction from a person other tha...

CVE-2019-2857: Undefined Security Weakness

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

Juniper Junos Space < 17.2R2 Persistent XSS Vulnerability (JSA10881)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.2R2, and is therefore affected by a persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director. A remote authenticated attacker can exploit tha...

Oracle Siebel CRM Siebel UI Framework Component Access Control Error Vulnerability

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions. The program includes sales management, marketing management, customer service systems, call center modules. Siebel UI Framework is one of the user interface framework components. A...

CVE-2019-1743 Cisco IOS XE Software Arbitrary File Upload Vulnerability

A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem of the affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by crafting a...

PT-2019-1712

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem of the affected...

CVE-2019-1743: Improper Input Validation

A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem of the affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by crafting a...

Unspecified Vulnerability in Oracle Siebel CRM Siebel UI Framework Component (CNVD-2019-39882)

Oracle Siebel CRM is a set of customer relationship management solutions from Oracle Oracle. The solution includes modules for sales management, marketing management, customer service systems, call centers, and more. An unspecified vulnerability exists in the Oracle Siebel CRM Siebel UI Framework...

Code injection

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 18.7, 18.8 and 18.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework...

CVE-2018-3059

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 18.7, 18.8 and 18.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework...

CVE-2018-3059

Oracle Siebel CRM Siebel UI Framework (UIF Open UI) is affected by CVE-2018-3059 in versions 18.7–18.9. The vulnerability allows an unauthenticated attacker with network access via HTTP to interact with Siebel UI Framework, with the CVSS 3.0 base score indicating confidentiality and integrity imp...