Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle…
Priority LOW 21Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect confidentiality via vectors related to Services, a different vulnerability than CVE-2016-5460 and CVE-2016-5466.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01922 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:oracle:siebel_core-server_framework:8.1.1:*:*:*:*:*:*:* | 8.1.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:siebel_core-server_framework:8.2.2:*:*:*:*:*:*:* | 8.2.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:siebel_core-server_framework:2014:*:*:*:*:*:*:* | 2014 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:siebel_core-server_framework:2015:*:*:*:*:*:*:* | 2015 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:siebel_core-server_framework:2016:*:*:*:*:*:*:* | 2016 | Vulnerable | Oracle |
- cpe:2.3:a:oracle:siebel_core-server_framework:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:siebel_core-server_framework:8.2.2:*:*:*:*:*:*:* Versions 8.2.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:siebel_core-server_framework:2014:*:*:*:*:*:*:* Versions 2014 Vulnerable ·Oracle
- cpe:2.3:a:oracle:siebel_core-server_framework:2015:*:*:*:*:*:*:* Versions 2015 Vulnerable ·Oracle
- cpe:2.3:a:oracle:siebel_core-server_framework:2016:*:*:*:*:*:*:* Versions 2016 Vulnerable ·Oracle
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-3450
- 2026-10-03 Alias added: GHSA-38c3-mwj9-557m
More Oracle Siebel Core-server Framework vulnerabilities
- TI-2016-04735 Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle… CVSS 3.0MEDIUM 6.5
- TI-2017-07404 Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent… CVSS 3.0MEDIUM 6.1
- TI-2016-04730 Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle… CVSS 3.0MEDIUM 5.3
- TI-2017-07513 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM… CVSS 3.0MEDIUM 5.4
- TI-2018-02098 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM… CVSS 3.0MEDIUM 5.0
- TI-2016-04734 Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle… CVSS 3.0LOW 3.7
Sources
- CVE-2016-3450 · CVE Program
- CVE-2016-3450 · NVD
- FIRST EPSS
- GHSA-38c3-mwj9-557m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences