Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
CVE-2025-30758: Oracle Siebel CRM User Interface Allows Unauthorized Data Access
CVE-2025-30758 · published 1 year ago
Summary
A security flaw in Oracle Siebel CRM's user interface for versions 25.0 through 25.5 makes it possible for hackers with internet access to view sensitive data without needing a password. This could potentially expose confidential information. Upgrade to a fixed version to protect your data.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| oracle | siebel_crm_deployment |
>= 25.0, <= 25.5 cpe:2.3:a:oracle:siebel_crm_deployment:*:*:*:*:*:*:*:* |
Original advisory text
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions that are affected are 25.0-25.5. Easily exploitable vulnerability allows unaut...
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions that are affected are 25.0-25.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM End User accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
References
- https://www.oracle.com/security-alerts/cpujul2025.html Patch Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-200Information Exposure
Timeline
Published15 Jul 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-30758 · NVD
Track software like this
Free during beta