Vulnerability in Oracle Siebel Crm
CVE-2019-2570
Vulnerability in the Siebel Core - Server BizLogic Script component of Oracle Siebel CRM (subcomponent: Integration - Scripting). The supported version that is affected is 19.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Core - Server BizLogic Script. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core - Server BizLogic Script accessible data as well as unauthorized read access to a subset of Siebel Core - Server BizLogic Script accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Core - Server BizLogic Script. CVSS 3.0 Base Score 4.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.009 (58.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 58th percentile — 58.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.009 · change: -0.001
Affected products
- Oracle Siebel Crm — versions 19.3
- Oracle Corporation Siebel Core - Server Framework — versions 19.3
References
- www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-2570?
- CVE-2019-2570 is a medium-severity vulnerability in Oracle Siebel Crm. CVSS score: 4.7/10. Published 2019-04-23.
- How severe is CVE-2019-2570?
- Medium severity. CVSS v3 base score is 4.7 out of 10.