SU
Product
Siebel UI Framework
On CISA KEVExploited in the wild
49
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 15Medium 26Low 3
Watch
Add Siebel UI Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-10263 | 8.2 | Oct 19 | Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI) Affected: 16.0; 17.0 |
| CVE-2017-3325 | 8.2 | Jan 27 | Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI) Affected: 16.1 |
| CVE-2020-24750 | 8.1 | Sep 17 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to… Affected: through 21.2 |
| CVE-2020-24616 | 8.1 | Aug 25 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka… Affected: through 21.2 |
| CVE-2016-5451 | 8.1 | Jul 21 | Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect… Affected: 8.1.1; 8.2.2; 2014; 2015; 2016 |
| CVE-2017-3330 | 7.6 | Jan 27 | Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI) Affected: 16.1 |
| CVE-2021-25122 | 7.5 | Mar 1 | Apache Tomcat h2c request mix-up Affected: through 21.9 |
| CVE-2020-13935 | 7.5 | Jul 14 | The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104 Affected: through 20.12 |
| CVE-2020-13934 | 7.5 | Jul 14 | An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2 Affected: through 20.12 |
| CVE-2020-11996 | 7.5 | Jun 26 | A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several… Affected: through 20.12 |
| CVE-2019-14439 | 7.5 | Jul 30 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2 Affected: through 19.10 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: through 21.0 |
| CVE-2017-10333 | 7.4 | Oct 19 | Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI) Affected: 16.0; 17.0 |
| CVE-2021-25329 | 7.0 | Mar 1 | Incomplete fix for CVE-2020-9484 Affected: before 21.9; 21.9 |
| CVE-2020-9484 | 7.0 | May 20 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a… Affected: through 20.12 |
Showing 15