PT-2025-29608 · Oracle · Oracle Siebel Crm

Javad Karimi · Published 2025-07-15 · Updated 2025-07-29 · CVE-2025-30758

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 25.0 through 25.5

Description An easily exploitable issue exists in the User Interface component of Oracle Siebel CRM, allowing an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Siebel CRM End User data.

Recommendations Update Oracle Siebel CRM versions prior to 25.6.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-08717

CVE-2025-30758

Affected Products

Oracle Siebel Crm

References · 7

• https://bdu.fstec.ru/vul/2025-08717 · Security Note
• https://oracle.com/security-alerts/cpujul2025.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-30758 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30758 · Security Note
• https://t.me/cveNotify/130133 · Telegram Post
• https://twitter.com/CVEnew/status/1945207873291550799 · Twitter Post
• https://twitter.com/dailycve/status/1950285547726938532 · Twitter Post