VDB
OSA-35484758
OSA-35484758
PUBLISHED
CVSS 7.5 HIGH
Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: EAI - Open UI (JSON-java)). Supported versions that are affected are 23.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | GoldenGate Veridata Version 12.2.1.4.0-12.2.1.4.230922 | GoldenGate Veridata Version 12.2.1.4.0-12.2.1.4.230922 |
| Oracle | Oracle GoldenGate Studio Version 12.2.1.4.0 | Oracle GoldenGate Studio Version 12.2.1.4.0 |
| Oracle | Oracle Financial Services Model Management and Governance Version 8.1.2.3 | Oracle Financial Services Model Management and Governance Version 8.1.2.3 |
| Oracle | Siebel CRM Version 23.8 and prior | Siebel CRM Version 23.8 and prior |
| Oracle | Oracle Financial Services Model Management and Governance Version 8.1.2.4 | Oracle Financial Services Model Management and Governance Version 8.1.2.4 |
Timeline
- Dec 8, 2023 CVE Published