Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel Core - Server Framework executes to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2021.html | Patch Vendor Advisory |
Configurations
History
23 Jul 2021, 21:28
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 4.4 |
| CPE | cpe:2.3:a:oracle:siebel_core_-_server_framework:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://www.oracle.com/security-alerts/cpujul2021.html - Patch, Vendor Advisory |
21 Jul 2021, 15:21
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-07-21 15:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-2353
Mitre link : CVE-2021-2353
CVE.ORG link : CVE-2021-2353
JSON object : View
Products Affected
oracle
- siebel_core_-_server_framework
CWE