Authorization Bypass in Oracle Siebel CRM Server Framework

CVE-2021-2353

What is CVE-2021-2353?

This vulnerability in Oracle Siebel CRM's Server Framework enables an attacker with high privileges, who is logged into the environment, to compromise the framework. Successful exploitation may lead to unauthorized access to sensitive data, potentially giving access to all data that the Server Framework can reach. Organizations utilizing affected versions of Oracle Siebel CRM should promptly apply available patches to secure their systems.

References