Exploitable Vulnerability in Oracle Siebel CRM by Oracle

CVE-2017-10315

Summary

A vulnerability exists in the Siebel UI Framework component of Oracle Siebel CRM, specifically within the UIF Open UI subcomponent. This issue affects supported versions 16.0 and 17.0. It can be easily exploited by an unauthenticated attacker with HTTP network access, necessitating human interaction from a victim to execute a successful attack. While the vulnerability is located in the Siebel UI Framework, it can lead to unauthorized updates, inserts, or deletions across data accessible within this framework. Furthermore, it poses a risk of unauthorized reading of certain subsets of data, significantly heightening the potential impact on systems relying on this application.

References