CVE-2021-2353

MEDIUM

Oracle Siebel CRM 21.5- Prior - Privilege Escalation

Title source: llm

Description

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel Core - Server Framework executes to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://www.oracle.com/security-alerts/cpujul2021.html

Scores

CVSS v3 4.4

EPSS 0.0019

EPSS Percentile 40.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (1)

oracle/siebel_core_-_server_framework < 21.5

Published Jul 21, 2021

Tracked Since Feb 18, 2026