Siebel Core Server Framework

Vendor:

First CVE: Jul 21, 2016 · Active for 10 years

Total CVEs

More Total CVEs than 88% of tracked products

2.7

Avg CVEs / Year

Higher CVE frequency than 82% of tracked products

5.3

Avg CVSS

Higher Avg CVSS than 5% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Siebel Core Server Framework over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 21, 2016

10 years ago

Most Recent CVE

Jul 21, 2021

1,829 days ago

CVE Severity & Scoring

Siebel Core Server Framework16 CVEs

31%

50%

19%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local2 (12.5%)

Network14 (87.5%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low10 (62.5%)

High6 (37.5%)

Unknown0 (0.0%)

User Interaction

None13 (81.3%)

Unknown0 (0.0%)

Required3 (18.8%)

Privileges Required

Low6 (37.5%)

High2 (12.5%)

None8 (50.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (16 CVEs).

16 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2020-24750HIGH FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfigur	Sep 17, 2020	8.1	29	NO	NO
CVE-2020-11612HIGH The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream	Apr 7, 2020	7.5	29	NO	NO
CVE-2019-0201MEDIUM An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requ	May 23, 2019	5.9	25	NO	NO
CVE-2021-2039HIGH Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search). Supported versions that are affected are 20.12 and prior. Easily exploitable v	Jan 20, 2021	7.6	23	NO	NO
CVE-2016-5461MEDIUM Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect	Jul 21, 2016	6.5	22	NO	NO
CVE-2016-5456MEDIUM Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect	Jul 21, 2016	5.3	20	NO	NO
CVE-2021-2353MEDIUM Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected are 21.5 and Prior. Easily exploitable vu	Jul 21, 2021	4.4	18	NO	NO
CVE-2018-2789MEDIUM Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). The supported version that is affected is 17.0. Easily exploitable vuln	Apr 19, 2018	5.0	18	NO	NO
CVE-2017-10162MEDIUM Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 16.0 and 17.0. Easily exploita	Oct 19, 2017	5.4	18	NO	NO
CVE-2017-10049MEDIUM Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability	Aug 8, 2017	6.1	18	NO	NO

View all 16 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (16 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (16 CVEs).

Media Mentions

Signals from CVEs in this product scope (16 CVEs).

Top CNAs Publishing CVEs For Siebel Core Server Framework

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
8.2.2	7	4.1	1.7%
8.1.1	7	4.1	1.7%
2016	7	4.1	1.7%
2015	7	4.1	1.7%
2014	7	4.1	1.7%
17.0	3	5.5	1.1%
16.0	2	5.8	1.1%