CVE-2019-2570

Vulnerability in the Siebel Core - Server BizLogic Script component of Oracle Siebel CRM (subcomponent: Integration - Scripting). The supported version that is affected is 19.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Core - Server BizLogic Script. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core - Server BizLogic Script accessible data as well as unauthorized read access to a subset of Siebel Core - Server BizLogic Script accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Core - Server BizLogic Script. CVSS 3.0 Base Score 4.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).

• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory

Published

Apr 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25694Kados R10 GreenBee contains an SQL injection vulnerability t…9.1
• CVE-2019-25695R 3.4.4 contains a local buffer overflow vulnerability that …8.6
• CVE-2019-25696Kados R10 GreenBee contains an SQL injection vulnerability t…9.1
• CVE-2019-25697CMSsite 1.0 contains an SQL injection vulnerability that all…9.8
• CVE-2019-25698Kados R10 GreenBee contains an SQL injection vulnerability t…9.1
• CVE-2019-25699Newsbull Haber Script 1.0.0 contains multiple SQL injection …7.1
• CVE-2019-25700Kados R10 GreenBee contains an SQL injection vulnerability t…9.1
• CVE-2019-25701Easy Video to iPod Converter 1.6.20 contains a local buffer …7.8
• CVE-2019-25702Kados R10 GreenBee contains an SQL injection vulnerability t…9.1
• CVE-2019-25703ImpressCMS 1.3.11 contains a time-based blind SQL injection …8.8
• CVE-2019-25704Kados R10 GreenBee contains an SQL injection vulnerability t…9.1
• CVE-2019-25705Echo Mirage 3.1 contains a stack buffer overflow vulnerabili…7.8