Unauthenticated Access Vulnerability in Oracle Siebel CRM Web Applications

CVE-2019-2719

Summary

The vulnerability in Oracle Knowledge within Oracle Siebel CRM allows an unauthenticated attacker with network access via HTTP to compromise sensitive data. Exploitation of this vulnerability may result in unauthorized update, insertion, or deletion of accessible data, as well as unauthorized read access to a subset of this data. While the vulnerability is specifically in the Oracle Knowledge component, successful attacks could significantly impact other products within the Oracle Siebel CRM suite. Notably, human interaction from an individual other than the attacker is required for successful exploitation, highlighting the potential for social engineering tactics in these attacks.

References