CVE-2016-5456

MEDIUM

Oracle Siebel CRM <8.3 - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Services.

References (4)

[Patch, Vendor Advisory] http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91787

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036400

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91958

Scores

CVSS v3 5.3

EPSS 0.0027

EPSS Percentile 49.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

Status draft

Affected Products (5)

oracle/siebel_core-server_framework

Timeline

Published Jul 21, 2016

Tracked Since Feb 18, 2026