The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory.

  - Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: EAI, UI (Apache Tomcat)).
    Supported versions that are affected are Prior to 23.12. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel CRM. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of Siebel CRM. (CVE-2023-42794, CVE-2023-42795, CVE-2023-44487, CVE-2023-45648)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Siebel Server (January 2024 CPU)

medium Nessus Plugin ID 212441

Version 1.1