Oracle Siebel Core - Server Framework vulnerabilities

6 CVEs affecting Oracle Siebel Core - Server Framework, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-2353, published 2021-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-0201, published 2019-05-23. Medium severity, CVSS 5.9. EPSS: 9.7% chance of exploitation in the next 30 days. An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and…
CVE-2020-11612, published 2020-04-07. High severity, CVSS 7.5. EPSS: 9.2% chance of exploitation in the next 30 days. The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty…
CVE-2020-24750, published 2020-09-17. High severity, CVSS 8.1. EPSS: 7.3% chance of exploitation in the next 30 days. FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
CVE-2019-2777, published 2019-07-23. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability…
CVE-2021-2039, published 2021-01-20. High severity, CVSS 7.6. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search). Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows…
CVE-2021-2353, published 2021-07-21. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows…