CVE-2019-2779

CVE-2019-2779 is a difficult-to-exploit vulnerability within the Email subcomponent of Oracle Siebel CRM's Siebel Core - Common Components, affecting versions 19.0 and prior. A highly privileged attacker with network access via HTTP can compromise the system, requiring user interaction from a non-attacker to succeed. Successful exploitation can lead to unauthorized access to critical data or complete access to all accessible Siebel Core - Common Components data, as reflected by its CVSS 3.0 Base Score of 4.2 (Medium) with a high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.