CVE-2021-2039

CVE-2021-2039 is a vulnerability within the Search component of Oracle Siebel CRM's Siebel Core - Server Framework, affecting versions 20.12 and prior. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Siebel Core - Server Framework. Successful attacks require human interaction from another user and can lead to unauthorized access to critical data, complete access to all accessible data, and unauthorized modification of some data. With a CVSS 3.1 Base Score of 7.6 (High), it poses significant confidentiality and integrity risks. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.