Known vulnerabilities in Siebel CRM End User

Vendor: Oracle
Software: Siebel CRM End User
Software CPE: cpe:2.3:a:oracle:siebel_crm_end_user:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Siebel CRM End User Siebel CRM End User is affected by 8 known vulnerabilities: 1 high, 6 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 57 more
#VU121785 - Improper input validation
CVE-2025-30758		 CWE-20 Medium
No
No
 - 29.07.2025 SB2025072980
#VU111161 - Resource exhaustion
CVE-2025-48988		 CWE-400 Medium
Available
No
 25.1 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 40 more
#VU98008 - Embedded Malicious Code
CVE-2024-38526		 CWE-506 High
No
No
 - 03.10.2024 SB2024100320
SB2025012201
SB20250620109
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357		 CWE-79 Medium
No
No
 - 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU83979 - Incorrect Permission Assignment for Critical Resource
CVE-2023-44387		 CWE-732 Low
No
No
 - 07.12.2023 SB2023120726
SB2023120727
SB2025012201
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 - 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 25.7 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more