CVE-2020-2560

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server). Supported versions that are affected are 19.10 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).

• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Published

Jan 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25594HashiCorp Vault and Vault Enterprise allowed for enumeration…5.3
• CVE-2020-25595An issue was discovered in Xen through 4.14.x. The PCI passt…7.8
• CVE-2020-25596An issue was discovered in Xen through 4.14.x. x86 PV guest …5.5
• CVE-2020-25597An issue was discovered in Xen through 4.14.x. There is mish…6.5
• CVE-2020-25598An issue was discovered in Xen 4.14.x. There is a missing un…5.5
• CVE-2020-25599An issue was discovered in Xen through 4.14.x. There are evt…7
• CVE-2020-25600An issue was discovered in Xen through 4.14.x. Out of bounds…5.5
• CVE-2020-25601An issue was discovered in Xen through 4.14.x. There is a la…5.5
• CVE-2020-25602An issue was discovered in Xen through 4.14.x. An x86 PV gue…6
• CVE-2020-25603An issue was discovered in Xen through 4.14.x. There are mis…7.8
• CVE-2020-25604An issue was discovered in Xen through 4.14.x. There is a ra…4.7
• CVE-2020-25605Cleartext transmission of sensitive information in Agora Vid…5.9