CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Access Control
Summary: vulnerability in the siebel core - server bizlogic script component of oracle siebel crm (subcomponent: integration - scripting). the supported version that is affected is 19.3. easily exploitable vulnerability allows high privileged attacker with network access via http to compromise siebel core - server bizlogic script. successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of siebel core - server bizlogic script accessible data as well as unauthorized read access to a subset of siebel core - server bizlogic script accessible data and unauthorized ability to cause a partial denial of service (partial dos) of siebel core - server bizlogic script. cvss 3.0 base score 4.7 (confidentiality, integrity and availability impacts). cvss vector: (cvss:3.0/av:n/ac:l/pr:h/ui:n/s:u/c:l/i:l/a:l).
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-04-23
Last Modified Date: 2019-04-24