Long Kuan

**Name of the Vulnerable Software and Affected Versions** Java SE versions 7u241, 8u231, 11.0.5, and 13.0.1 **Description** The issue is related to inadequate access control in the Libraries component of Oracle Java SE, which can be exploited by an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service. This can result in unauthorized ability to compromise Java SE, leading to a low availability impact. The vulnerability can only be exploited by supplying data to APIs in the specified component without using untrusted applications or applets. **Recommendations** For Java SE version 7u241, update to a version that fixes this issue. For Java SE version 8u231, update to a version that fixes this issue. For Java SE version 11.0.5, update to a version that fixes this issue. For Java SE version 13.0.1, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the Libraries component until a patch is available. Avoid using APIs in the Libraries component without proper validation and sanitization of input data.

**Name of the Vulnerable Software and Affected Versions** Oracle Siebel CRM Siebel UI Framework versions 19.10 and prior **Description** The issue is related to insufficient access control in the EAI component of the Siebel UI Framework. It allows an unauthenticated attacker with network access via HTTP to compromise the Siebel UI Framework, resulting in unauthorized read access to a subset of accessible data. **Recommendations** For versions 19.10 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.