CVE-2016-3472

MEDIUM

Oracle Siebel CRM <8.3 - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server.

References (4)

[Patch, Vendor Advisory] http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91787

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036400

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91978

Scores

CVSS v3 5.7

EPSS 0.0031

EPSS Percentile 53.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Classification

Status draft

Affected Products (5)

oracle/siebel_engineering-installer_and_deployment

Timeline

Published Jul 21, 2016

Tracked Since Feb 18, 2026