Unauthenticated Access Vulnerability in Oracle Siebel CRM's Search Functionality

CVE-2019-2777

Summary

This vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM enables unauthenticated attackers with network access via HTTP to compromise the framework. Successful exploitation of this vulnerability requires human interaction from an individual other than the attacker. Despite its presence in the Server Framework, attacks can have a widespread impact, affecting other linked products. Exploitation may allow unauthorized access to sensitive data, enabling attackers to update, insert, or delete information accessible through the Server Framework, as well as to read unauthorized segments of data.

References