CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Information Exposure
Summary: vulnerability in the siebel engineering - installer and deployment component of oracle siebel crm (subcomponent: siebel approval manager). supported versions that are affected are 16.0 and 17.0. easily exploitable vulnerability allows low privileged attacker with network access via http to compromise siebel engineering - installer and deployment. successful attacks of this vulnerability can result in unauthorized read access to a subset of siebel engineering - installer and deployment accessible data. cvss 3.0 base score 4.3 (confidentiality impacts). cvss vector: (cvss:3.0/av:n/ac:l/pr:l/ui:n/s:u/c:l/i:n/a:n).
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-01-18
Last Modified Date: 2018-01-26