Vulnerabilities > Oracle > Siebel UI Framework

DATE CVE VULNERABILITY TITLE RISK
2017-10-19 CVE-2017-10264 Unspecified vulnerability in Oracle Siebel UI Framework 16.0/17.0
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).
network
low complexity
oracle
5.0
2017-10-19 CVE-2017-10263 Unspecified vulnerability in Oracle Siebel UI Framework 16.0/17.0
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).
network
oracle
5.8
2017-04-17 CVE-2017-5645 Deserialization of Untrusted Data vulnerability in multiple products
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
network
low complexity
apache netapp redhat oracle CWE-502
critical
9.8
2017-03-15 CVE-2016-7103 Cross-site Scripting vulnerability in multiple products
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
6.1
2017-01-27 CVE-2017-3330 Remote Security vulnerability in Oracle Siebel UI Framework 16.1
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI).
network
oracle
4.9
2017-01-27 CVE-2017-3325 Remote Security vulnerability in Oracle Siebel UI Framework 16.1
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI).
network
oracle
5.8
2017-01-27 CVE-2017-3264 Remote Security vulnerability in Oracle Siebel UI Framework 16.1
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI).
network
oracle
3.5
2016-07-21 CVE-2016-5468 Remote Security vulnerability in Oracle Siebel UI Framework
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451.
network
low complexity
oracle
5.5
2016-07-21 CVE-2016-5464 Remote Security vulnerability in Oracle Siebel UI Framework
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5463.
network
oracle
3.5
2016-07-21 CVE-2016-5463 Remote Security vulnerability in Oracle Siebel UI Framework
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5464.
network
oracle
3.5