Remote Vulnerability in Oracle Siebel CRM Core Components
CVE-2016-5459

4.7MEDIUM

Key Information:

Vendor

Oracle
Status
Siebel Core-common Components
Vendor
CVE Published:
21 July 2016

What is CVE-2016-5459?

A vulnerability exists within the Core - Common Components of Oracle Siebel CRM, affecting various versions. This flaw allows remote attackers to potentially compromise the integrity of the system through specific vectors associated with the iHelp functionality, creating a risk that can be exploited if not addressed properly. Users of affected versions are encouraged to apply security patches and consult Oracle's advisories for guidance on mitigating risks.

References

http://www.securitytracker.com/id/1036400
vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/91787
vdb-entryx_refsource_BID

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.