Known vulnerabilities in Oracle Siebel CRM

Vendor: Oracle
Software: Oracle Siebel CRM
Software CPE: cpe:2.3:a:oracle:oracle_siebel_crm:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 24
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Siebel CRM Oracle Siebel CRM is affected by 24 known vulnerabilities: 4 high, 13 medium, 7 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 23.12 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU77102 - Stack-based buffer overflow
CVE-2022-45688		 CWE-121 Medium
No
No
 23.6 08.06.2023 SB2023060836
SB2023060927
SB2023071959
and 35 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 23.8 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75297 - Improper input validation
CVE-2023-21909		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418173
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 - 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 23.5 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 23.5 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69674 - Resource exhaustion
CVE-2022-40150		 CWE-400 Medium
No
No
 23.5 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 46 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 23.3 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 23.3, 23.6 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 23.6 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU64921 - Heap-based Buffer Overflow
CVE-2022-2274		 CWE-122 High
Available
No
 - 05.07.2022 SB2022070509
SB2022070531
SB2022102078
and 7 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 - 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 22.2 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU55859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37695		 CWE-79 Low
No
No
 21.2 16.08.2021 SB2021081608
SB2022011822
SB2022020113
and 16 more
#VU55414 - Improper input validation
CVE-2021-2368		 CWE-20 Medium
No
No
 - 28.07.2021 SB2021072817
#VU55415 - Improper input validation
CVE-2021-2353		 CWE-20 Low
No
No
 - 28.07.2021 SB2021072820
#VU55238 - Improper input validation
CVE-2020-7712		 CWE-20 Medium
No
No
 22.6 22.07.2021 SB2021072720
SB2022012312
SB2022071932
and 2 more
#VU52384 - Resource exhaustion
CVE-2020-7760		 CWE-400 Medium
No
No
 - 21.04.2021 SB2020103047
SB2021042101
SB2021042106
and 12 more
#VU6876 - Improper Access Control
CVE-2017-5637		 CWE-284 Low
No
No
 - 02.06.2017 SB2017060215
SB2021072820
SB2022072128
and 3 more


Showing elements 1 - 20 out of 24