CVE-2020-2738: Medium severity oracle siebel user interface framework vulnerability
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE). Supported versions that are affected are 20.2 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Oracle Siebel CRM vulnerability?
The vulnerability ID of this Oracle Siebel CRM vulnerability is CVE-2020-2738.
What is the title of this vulnerability?
The title of this vulnerability is 'Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM'.
What is the affected component of this vulnerability?
The affected component of this vulnerability is EAI SWSE.
What are the supported versions affected by this vulnerability?
The supported versions affected by this vulnerability are 20.2 and prior.
What is the severity of this vulnerability?
The severity of this vulnerability is medium with a severity value of 4.3.
How can this vulnerability be exploited?
This vulnerability can be exploited by a low privileged attacker with network access via HTTP to compromise Siebel UI Framework.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following link: [Oracle Security Alerts - CPUApr2020](https://www.oracle.com/security-alerts/cpuapr2020.html).