CVE-2018-2959: Medium severity oracle siebel user interface framework vulnerability

Published Jul 18, 2018

Updated

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).

Affected Software

1 affected component

Oracle Siebel UI Framework=18.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Event History

Jul 18, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-2959?

CVE-2018-2959 is classified as a high-severity vulnerability that can lead to unauthorized access in the Oracle Siebel UI Framework.

How do I fix CVE-2018-2959?

To fix CVE-2018-2959, it is recommended to apply the latest security patches provided by Oracle for the affected Siebel versions.

Who is affected by CVE-2018-2959?

CVE-2018-2959 affects organizations using Oracle Siebel CRM version 18.0 with the UI Framework component.

Can CVE-2018-2959 be exploited remotely?

Yes, CVE-2018-2959 can be easily exploited by unauthenticated attackers with network access via HTTP.

What is the potential impact of CVE-2018-2959?

The impact of CVE-2018-2959 includes unauthorized access and compromise of the Siebel UI Framework, potentially leading to data breaches.