Outlook Client Vulnerability in Oracle's Siebel CRM Affects Data Security
CVE-2018-2574
8.1HIGH
Summary
The vulnerability in Oracle's Siebel CRM Desktop's Outlook Client component allows low privileged attackers with network access via HTTP to exploit the system. Successful exploitation can lead to unauthorized actions such as creating, deleting, or altering critical data stored within the Siebel CRM. This risk results in potential exposure of sensitive information, making it essential for organizations using affected versions (16.0 and 17.0) to apply security patches promptly to mitigate these threats.
Affected Version(s)
Siebel CRM Desktop 16.0
Siebel CRM Desktop 17.0
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved