Unauthorized Access Vulnerability in Oracle Siebel CRM SWSE Server
CVE-2020-14531

5.9MEDIUM

Key Information:

Vendor

Oracle
Status
Siebel Ui Framework
Vendor
CVE Published:
15 July 2020

What is CVE-2020-14531?

This vulnerability in the Oracle Siebel CRM's SWSE Server component enables an unauthenticated attacker with HTTP network access to potentially compromise the Siebel UI Framework. Exploiting this vulnerability requires user interaction from someone other than the attacker, making it particularly difficult to orchestrate. If successfully exploited, the attacker may gain unauthorized access to sensitive data and possess the ability to perform updates, additions, or deletions to available data within the Siebel UI Framework, thereby compromising the confidentiality and integrity of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Siebel UI Framework 20.6 and prior

References

https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.