Vulnerability Description:
Vulnerability in the Oracle GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security (Eclipse Jetty)). Supported versions that are affected are 26.1.0.0.0-26.2.0.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate Stream Analytics. While the vulnerability is in Oracle GoldenGate Stream Analytics, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GoldenGate Stream Analytics accessible data as well as unauthorized read access to a subset of Oracle GoldenGate Stream Analytics accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N).Vulnerability Description:
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure (jackson-databind)). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment.
Exploitability
AV:NAC:HPR:NUI:NScope
S:CImpact
C:LI:LA:N5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N