CVE-2016-5451: High severity oracle siebel user interface framework vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5468.

Affected Software

5 affected components

Oracle Siebel UI Framework=8.1.1

Oracle Siebel UI Framework=8.2.2

Oracle Siebel UI Framework=2014

Oracle Siebel UI Framework=2015

Oracle Siebel UI Framework=2016

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5451?

CVE-2016-5451 has been classified as a vulnerability affecting confidentiality and integrity.

Who is affected by CVE-2016-5451?

Remote authenticated users of Oracle Siebel CRM versions 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 are affected by CVE-2016-5451.

How do I fix CVE-2016-5451?

To mitigate CVE-2016-5451, users should apply the latest security patches provided by Oracle for their specific Siebel CRM version.

What components are impacted by CVE-2016-5451?

CVE-2016-5451 impacts the Siebel UI Framework component within Oracle Siebel CRM.

What kind of attacks can CVE-2016-5451 enable?

CVE-2016-5451 can potentially enable attacks that affect the confidentiality and integrity of data accessed by remote authenticated users.