Unauthorized Data Access in Oracle Siebel CRM Search Component

CVE-2021-2039

Summary

A vulnerability exists within the Search component of Oracle Siebel CRM's Server Framework that allows low-privileged attackers with network access via HTTP to exploit the system. Successful exploitation requires human interaction from a non-attacking user. The impact of this vulnerability can lead to unauthorized access to critical data within the Siebel Core - Server Framework. This not only compromises the integrity and confidentiality of the accessible data but also permits unauthorized updates, insertions, or deletions, potentially affecting additional interconnected products.

References