PT-2025-29608 · Oracle · Oracle Siebel Crm

Javad Karimi

·

CVE-2025-30758

·

Published

2025-07-15

·

Updated

2025-07-29

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 25.0 through 25.5
Description An easily exploitable issue exists in the User Interface component of Oracle Siebel CRM, allowing an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Siebel CRM End User data.
Recommendations Update Oracle Siebel CRM versions prior to 25.6.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-08717
CVE-2025-30758

Affected Products

Oracle Siebel Crm