Exploitable Vulnerability in Siebel CRM UI Framework by Oracle

CVE-2023-21909

Summary

A vulnerability exists in the UI Framework of Oracle's Siebel CRM product, affecting versions 23.3 and earlier. This flaw can be easily exploited by low-privileged attackers with network access via HTTP. Successful exploitation may allow attackers to gain unauthorized access to sensitive data, potentially compromising critical information stored within the Siebel CRM system. It is essential for users to implement security measures to mitigate the risks associated with this vulnerability.

References