Vulnerabilities > Oracle > Siebel UI Framework

DATE CVE VULNERABILITY TITLE RISK
2020-02-24 CVE-2020-1935 HTTP Request Smuggling vulnerability in multiple products
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid.
network
high complexity
apache debian canonical opensuse netapp oracle CWE-444
4.8
4.8
2020-01-15 CVE-2020-2564 Unspecified vulnerability in Oracle Siebel UI Framework
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI).
network
low complexity
oracle
5.3
5.3
2020-01-15 CVE-2020-2560 Unspecified vulnerability in Oracle Siebel UI Framework
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server).
network
oracle
4.3
4.3
2020-01-15 CVE-2020-2559 Unspecified vulnerability in Oracle Siebel UI Framework
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: UIF Open UI).
network
low complexity
oracle
5.3
5.3
2020-01-03 CVE-2019-20330 Deserialization of Untrusted Data vulnerability in multiple products
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
network
low complexity
fasterxml oracle debian netapp CWE-502
critical
 9.8
9.8
2019-10-16 CVE-2019-2935 Unspecified vulnerability in Oracle Siebel UI Framework
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI).
network
low complexity
oracle
5.0
5.0
2019-10-01 CVE-2019-16942 Deserialization of Untrusted Data vulnerability in multiple products
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.
network
low complexity
fasterxml debian fedoraproject redhat netapp oracle CWE-502
critical
 9.8
9.8
2019-07-30 CVE-2019-14439 Deserialization of Untrusted Data vulnerability in multiple products
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. 		7.5
7.5
2019-07-29 CVE-2019-14379 SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.
network
low complexity
fasterxml debian netapp fedoraproject redhat oracle apple
critical
 9.8
9.8
2019-07-23 CVE-2019-2857 Unspecified vulnerability in Oracle Siebel UI Framework
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).
network
oracle
4.9
4.9