Siebel UI Framework vulnerabilities | LiveThreat CVE Feed

Product

Siebel UI Framework

by Oracle · last CVE Dec 28, 2021

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities49 In the news0 Timeline

Severity mix

Critical 5High 15Medium 26Low 3

Severity

All severities49 Critical5 High15 Medium26 Low3

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Siebel UI Framework to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-44832	6.6	98%	Dec 28	Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses… Affected: 21.12; through 21.12
CVE-2021-26272	6.5	2%	Jan 26	It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space… Affected: through 21.9
CVE-2021-26271	6.5	2%	Jan 26	It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the… Affected: before 21.9
CVE-2020-11022	6.1	99%	Apr 29	In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: 20.8; 20.8
CVE-2018-3059	6.1	1%	Oct 17	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI) Affected: 18.7; 18.8; 18.9
CVE-2018-8032	6.1	11%	Aug 2	Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: through 21.0
CVE-2015-9251	6.1	30%	Jan 18	jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript… Affected: 18.10; 18.11
CVE-2017-10315	6.1	1%	Oct 19	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI) Affected: 16.0; 17.0
CVE-2017-10302	6.1	1%	Oct 19	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI) Affected: 16.0; 17.0
CVE-2016-7103	6.1	29%	Mar 15	Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog… Affected: through 21.2
CVE-2020-14531	5.9	1%	Jul 15	Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server) Affected: through 20.6
CVE-2021-32808	5.4	1%	Aug 12	ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: through 21.9
CVE-2019-2857	5.4	1%	Jul 23	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI) Affected: through 19.0
CVE-2016-5468	5.4	1%	Jul 21	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect… Affected: 8.1.1; 8.2.2; 2014; 2015; 2016
CVE-2016-0673	5.4	1%	Apr 21	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via… Affected: 8.1.1; 8.2.2
CVE-2020-2564	5.3	2%	Jan 15	Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI) Affected: through 19.10
CVE-2020-2559	5.3	2%	Jan 15	Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: UIF Open UI) Affected: through 19.7
CVE-2019-2935	5.3	2%	Oct 16	Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI) Affected: through 19.8
CVE-2017-10264	5.3	2%	Oct 19	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI) Affected: 16.0; 17.0
CVE-2020-1935	4.8	9%	Feb 24	In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP… Affected: through 20.5
CVE-2020-2560	4.7	1%	Jan 15	Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server) Affected: through 19.10
CVE-2016-5450	4.7	2%	Jul 21	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via… Affected: 8.1.1; 8.2.2; 2014; 2015; 2016
CVE-2020-2738	4.3	1%	Apr 15	Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE) Affected: through 20.2
CVE-2018-2959	4.3	1%	Jul 18	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI) Affected: 18.0
CVE-2016-5464	4.1	1%	Jul 21	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity… Affected: 8.1.1; 8.2.2; 2014; 2015; 2016
CVE-2016-5463	4.1	1%	Jul 21	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity… Affected: 8.1.1; 8.2.2; 2014; 2015; 2016