CVE-2016-5468: Medium severity oracle siebel user interface framework vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451.

Affected Software

5 affected components

Oracle Siebel UI Framework=8.1.1

Oracle Siebel UI Framework=8.2.2

Oracle Siebel UI Framework=2014

Oracle Siebel UI Framework=2015

Oracle Siebel UI Framework=2016

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5468?

CVE-2016-5468 is rated as a moderate severity vulnerability primarily affecting the confidentiality and integrity of the Oracle Siebel CRM.

How do I fix CVE-2016-5468?

To fix CVE-2016-5468, update your Oracle Siebel CRM to the latest patched version provided by Oracle.

Who is affected by CVE-2016-5468?

CVE-2016-5468 affects remote authenticated users of Oracle Siebel CRM versions 8.1.1, 8.2.2, IP2014, IP2015, and IP2016.

What components are vulnerable in CVE-2016-5468?

The vulnerability exists in the Siebel UI Framework component of Oracle Siebel CRM.

Can CVE-2016-5468 lead to data breaches?

Yes, due to its nature, CVE-2016-5468 can potentially allow attackers to compromise the confidentiality and integrity of sensitive data.