Known vulnerabilities in Siebel CRM Integration

Vendor: Oracle
Software: Siebel CRM Integration
Software CPE: cpe:2.3:a:oracle:siebel_crm_integration:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 13
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Siebel CRM Integration Siebel CRM Integration is affected by 13 known vulnerabilities: 3 high, 10 medium Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123913 - Improper Access Control
CVE-2024-29371		 CWE-284 Medium
No
No
 - 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 28 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU112146 - Server-Side Request Forgery (SSRF)
CVE-2025-27817		 CWE-918 High
Available
No
 - 03.07.2025 SB2025070339
SB2025070340
SB2025070345
and 42 more
#VU103646 - Integer overflow
CVE-2025-0725		 CWE-190 High
No
No
 - 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU103322 - Out-of-bounds read
CVE-2024-36124		 CWE-125 Medium
No
No
 - 27.01.2025 SB2025012734
SB2025012735
SB2025013120
and 7 more
#VU95166 - Incorrect Authorization
CVE-2024-27309		 CWE-863 Medium
No
No
 - 02.08.2024 SB2024080227
SB2024080228
SB20240827147
and 5 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 - 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU86623 - Use After Free
CVE-2024-23807		 CWE-416 High
No
No
 - 20.02.2024 SB2024022032
SB2024062836
SB2024071042
and 24 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 - 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 - 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 - 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more