Unauthenticated Access Vulnerability in Oracle Siebel Marketing Application

CVE-2021-2338

Summary

An unauthenticated access vulnerability exists in Oracle Siebel CRM's Email Marketing application that allows attackers with network access through HTTP to compromise the application. Although the vulnerability is specific to Siebel Apps - Marketing, successful exploitation may also affect associated products. The attacks necessitate human interaction, leading to potential unauthorized updates, data inserts, deletions, and access to sensitive data within the application. Organizations utilizing affected versions should adopt immediate measures to mitigate potential risks.

References