Vulnerability in Oracle Siebel CRM UI Framework Component

CVE-2017-10302

Summary

The vulnerability affects the Siebel UI Framework component of Oracle Siebel CRM, specifically in versions 16.0 and 17.0. This security flaw allows an unauthenticated attacker with network access via HTTP to compromise the UI Framework. Notably, successful exploitation of this vulnerability necessitates human interaction from a target user. Although it primarily resides within the Siebel UI Framework, successful attacks may lead to unauthorized alterations, including updates, inserts, or deletions of data, as well as unauthorized reading of sensitive information from the framework. Attack impacts can be significantly broad, affecting additional products associated with Oracle Siebel CRM.

References