CVE-2015-2587

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect integrity via vectors related to SWSE Server Infrastructure.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/75876
http://www.securitytracker.com/id/1032916
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/75876
http://www.securitytracker.com/id/1032916

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:siebel_crm:8.1.1:::::::*
	cpe:2.3:a:oracle:siebel_crm:8.2.2:::::::*
	cpe:2.3:a:oracle:siebel_crm:15.0:::::::*

History

21 Nov 2024, 02:27

Type	Values Removed	Values Added
References	~~() http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - Patch, Vendor Advisory~~	() http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - Patch, Vendor Advisory
References	~~() http://www.securityfocus.com/bid/75876 -~~	() http://www.securityfocus.com/bid/75876 -
References	~~() http://www.securitytracker.com/id/1032916 -~~	() http://www.securitytracker.com/id/1032916 -

Information

Published : 2015-07-16 10:59

Updated : 2024-11-21 02:27

NVD link : CVE-2015-2587

Mitre link : CVE-2015-2587

CVE.ORG link : CVE-2015-2587

JSON object : View

Products Affected

oracle

siebel_crm

CWE

NVD-CWE-noinfo

{"id": "CVE-2015-2587", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-07-16T10:59:14.313", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/75876", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id/1032916", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/75876", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1032916", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect integrity via vectors related to SWSE Server Infrastructure."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Siebel UI Framework en Oracle Siebel CRM versiones 8.1.1, 8.2.2 y 15.0, permite a atacantes remotos afectar la integridad a trav\u00e9s de vectores relacionados con SWS Server Infrastructure."}], "lastModified": "2024-11-21T02:27:39.650", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:siebel_crm:8.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07BB8F43-D4BB-4ED4-891F-69DADC8E59CA"}, {"criteria": "cpe:2.3:a:oracle:siebel_crm:8.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F55FFD29-ABCA-4530-83DA-468A71D4E9BF"}, {"criteria": "cpe:2.3:a:oracle:siebel_crm:15.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14145C55-F52F-4E3D-ACFA-CB4C77E58BB3"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}