Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported versions that are affected are 23.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuapr2023.html | Patch Vendor Advisory |
Configurations
History
19 Apr 2023, 19:23
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://www.oracle.com/security-alerts/cpuapr2023.html - Patch, Vendor Advisory | |
| First Time |
Oracle siebel Crm
Oracle |
|
| CPE | cpe:2.3:a:oracle:siebel_crm:*:*:*:*:*:*:*:* |
18 Apr 2023, 20:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-18 20:15
Updated : 2023-04-19 19:23
NVD link : CVE-2023-21909
Mitre link : CVE-2023-21909
JSON object : View
Products Affected
oracle
- siebel_crm
CWE