漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Core - Server Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core - Server Framework accessible data as well as unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle Siebel CRM Siebel Core - Server Framework组件访问控制错误漏洞
Vulnerability Description
Oracle Siebel CRM是美国甲骨文(Oracle)公司的一套客户关系管理解决方案。该方案包括销售管理、市场营销管理、客户服务系统、呼叫中心等模块。Siebel Core - Server Framework是其中的一个Siebel服务器框架组件。 Oracle Siebel CRM中的Siebel Core - Server Framework组件的Search子组件存在安全漏洞。攻击者可利用该漏洞未授权读取、更新、插入或删除数据,影响数据的保密性和完整性。
CVSS Information
N/A
Vulnerability Type
N/A