Oracle Siebel CRM Server Infrastructure Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in versions 17.0 through 25.2. This vulnerability allows an unauthenticated attacker with network access via TLS to disrupt the Siebel CRM Deployment service. Exploitation of this vulnerability can lead to a complete hang or a frequently repeatable crash of the application, causing a significant denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a complete denial-of-service condition by hanging the application or causing it to crash frequently and repeatably.