CVE-2018-2789: Medium severity oracle siebel core - server framework vulnerability

Published Apr 19, 2018

Updated

Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). The supported version that is affected is 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. While the vulnerability is in Siebel Core - Server Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).

Affected Software

1 affected component

Oracle Siebel Core-server Framework=17.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Event History

Apr 19, 2018

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-2789?

CVE-2018-2789 is classified as a high-severity vulnerability due to its potential for exploitation by low privileged attackers.

How do I fix CVE-2018-2789?

To fix CVE-2018-2789, apply the latest security patches provided by Oracle for the affected version of Siebel Core - Server Framework.

Who is affected by CVE-2018-2789?

CVE-2018-2789 affects users of Oracle Siebel Core - Server Framework version 17.0.

What type of vulnerability is CVE-2018-2789?

CVE-2018-2789 is a remote code execution vulnerability within the Siebel Core - Server Framework.

Can CVE-2018-2789 be exploited over the network?

Yes, CVE-2018-2789 can be easily exploited by low privileged attackers with network access via HTTP.