The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory.

  - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Repository Utilities     (zlib)). Supported versions that are affected are 24.6 and prior. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful     attacks of this vulnerability can result in takeover of Siebel CRM Deployment. (CVE-2022-37434)

  - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation (Oracle     Java SE)). Supported versions that are affected are 24.6 and prior. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM Deployment.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of     service (partial DOS) of Siebel CRM Deployment. (CVE-2023-22081)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the openjdk11 package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
212440	Oracle Siebel Server (July 2024 CPU)	Nessus	Misc.	2024/12/11	2024/12/12	critical
299585	Photon OS 4.0: Openjdk11 PHSA-2026-4.0-0961	Nessus	PhotonOS Local Security Checks	2026/2/19	2026/2/19	high

检测

插件搜索

critical

high