CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Improper Access Control
Summary: vulnerability in the siebel core - common components component of oracle siebel crm (subcomponent: email). supported versions that are affected are 19.0 and prior. difficult to exploit vulnerability allows high privileged attacker with network access via http to compromise siebel core - common components. successful attacks require human interaction from a person other than the attacker. successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all siebel core - common components accessible data. cvss 3.0 base score 4.2 (confidentiality impacts). cvss vector: (cvss:3.0/av:n/ac:h/pr:h/ui:r/s:u/c:h/i:n/a:n).
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/NONE/NONE
Published Date: 2019-07-23
Last Modified Date: 2019-07-29