CVE-2019-2965

CVE-2019-2965 affects Oracle Siebel CRM Siebel Core - DB Deployment and Configuration (Install - Configuration). Affected: 19.8 and earlier. Vulnerability allows unauthenticated, network-based (HTTP) access to compromise data confidentiality and potentially expose all Siebel Core - DB Deployment ...

CVE-2011-3518

Public technical details for CVE-2011-3518 are not provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories.

CVE-2015-0388

Oracle Siebel CRM 8.1.1/8.2.2 are affected via the Siebel UI Framework Portal Framework. CVE-2015-0388 is described as an easily exploitable vulnerability allowing authenticated, network-based HTTP access that can lead to unauthorized read access of Siebel UI Framework data; the exact root cause ...

CVE-2026-46885

Technical details for CVE-2026-46885 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and the CVE records.

CVE-2015-0366

CVE-2015-0366 is an unspecified vulnerability in Oracle Siebel CRM (Siebel Core - EAI, Java Integration) affecting versions 8.1.1 and 8.2.2. The issue permits remote attackers to affect confidentiality via unknown vectors; no exploit details are provided in the available documents. Connected sour...

CVE-2015-4841

CVE-2015-4841 affects Oracle Siebel CRM IP2014 PS10 and IP2015 PS5, via the Siebel Core - Server Framework (subcomponent: Services). The underlying issue enables unauthenticated network access to a subset of Siebel data over HTTP, resulting in partial confidentiality impact. According to the Octo...

CVE-2021-2368

CVE-2021-2368 affects Oracle Siebel CRM (Siebel Core - Server Infrastructure). Affected: Siebel CRM version 21.5 and earlier. Description: unauthenticated attacker over HTTPS can access or compromise data; impact is unauthorized access to data. Connected sources also reference additional context ...

CVE-2023-21909

CVE-2023-21909 affects Oracle Siebel CRM UI Framework. Affected: Siebel CRM versions 23.3 and earlier. Vulnerability allows a low-privilege attacker with network access over HTTP to compromise data exposure across Siebel CRM. CVSS 3.1 base score 6.5 (Confidentiality impact). Remediation: Oracle C...

CVE-2026-62454

Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3–26.6) is vulnerable to a local privilege escalation attack. A low-privileged attacker with infrastructure access can achieve full application takeover, impacting confidentiality, integrity, and availability (CVSS 7.8 HIGH). Exploit...

CVE-2012-1680

CVE-2012-1680 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Apps - Multi-channel Technologies component. The vulnerability allows remote authenticated users to affect confidentiality via unknown vectors. The issue is tied to the January 2013 Oracle CPU advisories; no explicit...

CVE-2013-5769

CVE-2013-5769 affects Oracle Siebel CRM 8.1.1, specifically the Siebel Core - EAI component (Web Services). The vulnerability allows remote authenticated users to impact availability via HTTP-based attacks on the Web Services subcomponent, summarized as an authenticated network DoS (partial). The...

CVE-2015-2649

Oracle Siebel CRM is affected by CVE-2015-2649 in the Siebel UI Framework (subcomponent UIF Open UI). Affected versions are 8.1.1, 8.2.2, and 15.0. The vulnerability allows remote authenticated users to access a subset of Siebel UI data, impacting confidentiality via HTTPS. Attack characteristics...

CVE-2015-0419

CVE-2015-0419 affects Oracle Siebel CRM 8.1.1 and 8.2.2 in the Siebel UI Framework Portal Framework. The vulnerability allows unauthorized read access via HTTP and is described in the January 2015 CPU as a difficult-to-exploit issue that requires authentication. No further technical details (root...

CVE-2013-0365

The CVE-2013-0365 entry affects Oracle Siebel CRM versions 8.1.1 and 8.2.2 (Siebel Security component). The Nessus/Oracle CPU data states it is an authenticated network vulnerability exploitable via HTTP that can lead to unauthorized read access to a subset of Siebel CRM data. No separate exploit...

CVE-2013-5761

CVE-2013-5761 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core - Server BizLogic Script component, with unknown vectors impacting confidentiality and integrity in the Integration - Scripting area. Connected sources corroborate affected versions and component; PT Security ad...

CVE-2014-2485

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by multiple vulnerabilities reported in the July 2014 CPU, including issues in the Siebel Travel & Transportation component (Diary) and Siebel UI Framework components (Open_UI and Portal Framework). The Nessus entry indicates these vulnerabilities al...

CVE-2015-0363

CVE-2015-0363 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core EAI component (Integration Business Services). The vulnerability is described as allowing remote authentication-based access to impact availability via unknown vectors. The connected Nessus entry references mult...

CVE-2012-1732

Oracle Siebel CRM (UI Framework) on 8.1.1/8.2.2 is affected by CVE-2012-1732 due to a vulnerability in the UI Framework. The Nessus entry notes this CVE as easily exploitable, allowing authenticated network attacks via HTTP and resulting in unauthorized read access to a subset of Siebel CRM data....

CVE-2013-1510

Technical details for CVE-2013-1510 are not publicly available in the provided documents. No information on affected products, vulnerability type, or remediation is present. Monitor for updates in official advisories.

CVE-2015-2587

CVE-2015-2587 affects Oracle Siebel CRM versions 8.1.1, 8.2.2 and 15.0 in the Siebel UI Framework component, specifically the SWSE Server Infrastructure. The vulnerability, described in connected Nessus data, enables network-based access that can lead to unauthorized update/insert/delete operatio...

CVE-2013-5768

CVE-2013-5768 is an Oracle Siebel CRM issue affecting the Siebel UI Framework (Open_UI) via ActiveX Controls in Oracle Siebel CRM 8.1.1 and 8.2.2. The vulnerability allows remote authenticated attackers to affect data integrity, typically via HTTP, with the issue attributed to authenticated netwo...

CVE-2014-4231

Oracle Siebel CRM CVE-2014-4231 affects the Siebel Travel & Transportation component (subcomponent Diary) in versions 8.1.1 and 8.2.2. The vulnerability allows remote, unauthenticated attackers to impact data integrity via unspecified vectors over HTTP, per the July 2014 CPU references. The exact...

CVE-2015-0502

CVE-2015-0502 affects Oracle Siebel CRM (Siebel UI Framework, subcomponent Portal Framework) with supported versions 8.1 and 8.2. The vulnerability arises in the Portal Framework and enables unauthenticated, network-based attacks via HTTP, potentially allowing unauthorized update/insert/delete of...

CVE-2012-3170

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by a vulnerability in the Siebel Core - Server Infrastructure (CVE-2012-3170). The issue allows unauthenticated remote attackers to cause a partial denial of service over HTTP. The Nessus plugin for January 2013 CPU references this CVE as part of mul...

CVE-2014-0369

Oracle Siebel CRM is affected by CVE-2014-0369 in the Siebel Core - EAI component (Java Integration) for versions 8.1.1 and 8.2.2. The vulnerability is described as an unspecified issue that allows remote attackers to affect confidentiality via unknown vectors related to Java Integration; no expl...

CVE-2011-2316

Technical details for CVE-2011-2316 are not publicly available in the provided documents. Monitor for updates; sources mention Oracle Siebel CRM 8.0.0 and Email Marketing but do not disclose root cause, affected versions beyond 8.0.0, or mitigations.

CVE-2012-3172

CVE-2012-3172 is an Oracle Siebel CRM vulnerability affecting Siebel CRM 8.1.1 and 8.2.2 in the Siebel Apps - Multi-channel Technologies area. The connected Nessus/NASL entry notes an easily exploitable flaw that enables authenticated network attackers to trigger a partial denial of service via H...

CVE-2013-0416

Oracle Siebel CRM 8.1.1 and 8.2.2 have an unspecified vulnerability in the Siebel Enterprise Application Integration (EAI) Web Services, exploitable by remote authenticated users to affect confidentiality via unknown vectors per the NVD description. The impact is partial confidentiality; no other...

CVE-2015-0365

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by multiple vulnerabilities described in the January 2015 CPU, including issues in Siebel Core - Server Infrastructure and other components (e.g., UI Framework, BizLogic Script). CVE-2015-0365 is listed among these, with an unspecified confidentialit...

CVE-2011-0833

CVE-2011-0833 is an unspecified vulnerability in the Siebel CRM Core component affecting Oracle Siebel CRM 7.8.2, 8.0.0, and 8.1.1 (UIF Client). It allows remote attackers to impact integrity. The connected documents confirm the affected products/versions and that the issue is described without d...

CVE-2011-0843

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2013-3841

Oracle Siebel CRM 8.1.1.x and 8.2.2.x are affected by CVE-2013-3841 in the Siebel Core - EAI (Web Services) component. The vulnerability is described as an unspecified issue that allows remote attackers to affect confidentiality via Web Services vectors. The connected Nessus/CPU notes reference m...

CVE-2014-2491

Affected product: Oracle Siebel CRM (Siebel UI Framework, Portal Framework subcomponent). Vulnerable versions: 8.1.1 and 8.2.2. Issue: a design/logic vulnerability in the Siebel UI Framework Portal Framework that allows successful unauthenticated network access via HTTP, enabling unauthorized upd...

CVE-2012-1754

CVE-2012-1754 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the UI Framework subcomponent. According to the Oracle Siebel/July 2012 CPU context and Nessus details, it enables an authenticated, HTTP-based attack that can disclose data (unauthorized read access) and is part of a set of UI...

CVE-2013-5835

CVE-2013-5835 refers to a vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 in the Siebel UI Framework component (Open_UI). The connected Nessus/NASL entry notes this vulnerability as easily exploitable via HTTP, allowing unauthenticated network access that can update/insert/delete data in Siebe...

CVE-2015-2600

CVE-2015-2600 is an Oracle Siebel CRM vulnerability affecting the Siebel Core – Server OM Svcs component (Security subcomponent) on versions 8.1.1, 8.2.2 and 15.0. The connected Nessus entry confirms a vulnerability that permits authenticated network attacks via HTTPS, resulting in unauthorized r...

CVE-2011-0834

Technical details about CVE-2011-0834 are not publicly provided in the supplied documents; no concrete information on vulnerable product versions, root cause, impact, or remediation is available.

CVE-2012-1742

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by CVE-2012-1742 in the UI Framework. The Nessus entry notes an easily exploitable, unauthenticated network path via HTTP that can cause a partial denial of service of Siebel CRM. Publicly available details in the provided documents are limited to th...

CVE-2013-3840

The CVE-2013-3840 entry concerns Oracle Siebel CRM 8.1.1 and 8.2.2. Affects the Siebel Core - EAI component (Web Services). Root cause is an unspecified vulnerability in that EAI/Web Services area that allows remote authenticated users to affect confidentiality. The exact vectors, exploit details...

CVE-2015-0392

Affected product/versions: Oracle Siebel CRM 8.1.1 and 8.2.2. Vulnerable component: Siebel Core – Server BizLogic Script (Config – Scripting). Root cause / nature: A security vulnerability in the BizLogic Script component could allow unauthorized access to data, as described by CVE-2015-0392 and ...

CVE-2013-2399

CVE-2013-2399 affects Oracle Siebel CRM 8.1.1/8.2.2, specifically the Siebel Call Center component (Email - COMM Server Components). The Nessus entry notes this vulnerability allows authenticated network attackers to read a subset of Siebel Call Center data. The public documents do not provide ex...

CVE-2014-4230

CVE-2014-4230 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel UI Framework component Open_UI. The flaw, described as an unspecified vulnerability in Open_UI, enables remote, unauthenticated network attacks that can impact data integrity. The NVD entry lists a CVSS v2 base score...

CVE-2014-6528

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by an unspecified vulnerability in the Siebel Core - System Management component. The CVE description indicates remote authenticated access can affect confidentiality via unknown vectors related to Server Infrastructure. The connected Nessus/CNVD/NVD...

CVE-2015-0364

CVE-2015-0364 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core - EAI component (Integration Business Services). The vulnerability is described as allowing remote authenticated users to impact availability via unknown vectors; exact root cause, exploit details, and affected ...

CVE-2012-3230

The CVE-2012-3230 issue affects Oracle Siebel CRM 8.1.1 in the Siebel UI Framework component (Portal Framework). The vulnerability, described as an unspecified flaw in the Portal Framework, allows remote readers to access confidential data via HTTP. Nessus details (and the OCT 2012 CPU advisory) ...

CVE-2013-5867

CVE-2013-5867 affects Oracle Siebel CRM 8.1.1 and 8.2.2 (Siebel Core - Server Infrastructure). The Nessus/CPU notes describe an unauthenticated network vulnerability via HTTP in SISNAPI & Network Infrastructure that can cause partial denial of service (availability impact). Affected versions and ...

CVE-2014-4250

CVE-2014-4250 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core – Server OM Frwks component. The vulnerability is described as an unspecified issue that could allow remote authenticated users to affect confidentiality via unknown vectors related to Object Manager. The connec...

CVE-2014-6599

Concretely, CVE-2014-6599 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core - Common Components Email subcomponent. The CNVD entry indicates a vulnerability in that Email subcomponent that could be exploited remotely to compromise confidentiality (unauthorized data access vi...

CVE-2012-1760

Affects: Oracle Siebel CRM 8.1.1 and 8.2.2. Component: UI Framework. Vulnerability (CVE-2012-1760): Difficult to exploit; unauthenticated network attacks via HTTP can lead to a hang or frequent crash (complete DOS). Impact: Partial denial of service to Siebel CRM; no data exfiltration described. ...

CVE-2012-1761

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by a CVE-2012-1761 vulnerability in the UI Framework. The Nessus entry confirms a difficult-to-exploit, unauthenticated network attack via HTTP that can result in partial data modification or exposure, tied to the UI Framework component of Siebel CRM...