CVE-2015-0417: Medium severity oracle siebel core - common components vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0388.

Affected Software

2 affected components

Oracle Siebel CRM=8.1.1

Oracle Siebel CRM=8.2.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0417?

The severity of CVE-2015-0417 is classified as medium due to its potential impact on confidentiality for authenticated users.

How do I fix CVE-2015-0417?

To fix CVE-2015-0417, apply the latest security updates provided by Oracle for your affected version of Siebel CRM.

Which versions of Oracle Siebel CRM are affected by CVE-2015-0417?

CVE-2015-0417 affects Oracle Siebel CRM versions 8.1.1 and 8.2.2.

Can CVE-2015-0417 be exploited remotely?

Yes, CVE-2015-0417 can be exploited remotely by authenticated users due to unspecified vulnerabilities in the framework.

What is the main impact of CVE-2015-0417?

The main impact of CVE-2015-0417 is a compromise of confidentiality for authenticated users within the Oracle Siebel CRM environment.