Skip to content
OpenAdvisories
Medium WID-SEC-2025-0164 2 CVEs

Oracle Siebel CRM: Mehrere Schwachstellen

Published Jan 21, 2025 · Updated Jan 21, 2025 · de-DE

Vendor: Oracle Product: Siebel CRM Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Siebel CRM ausnutzen, um die Vertraulichkeit und Verfügbarkeit zu gefährden.

Product

Siebel CRM ist eine CRM-Lösung von Oracle.

Vulnerabilities 2

  • Low 3.2
    CVE-2023-44387

    Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations

    Gradle is a build tool with a focus on build automation and support for multi-language development. When copying or archiving symlinked files, Gradle resolves them but applies the permissions of the symlink itself instead of the permissions of the linked file…

    gradle gradle gradle gradle Debian Ubuntu
  • None 0.0
    CVE-2024-38526 Public exploit

    pdoc embeds link to malicious CDN if math mode is enabled

    pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc --math` linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1.

    mitmproxy pdoc pdoc PyPI

Revision history

  1. #1

    Initiale Fassung

References