CVE-2017-3325: Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI).

Security readout for executives and security teams

CVE-2017-3325 affects Oracle Siebel CRM 16.1 through the Siebel UI Framework EAI subcomponent. An unauthenticated attacker with HTTP access could compromise sensitive Siebel data if they can induce required human interaction. The main business risk is unauthorized access to critical CRM data and unauthorized changes to some records. Exposure is most likely where Oracle Siebel CRM 16.1 has Siebel UI Framework or EAI functionality reachable over HTTP, especially from untrusted networks or broad internal user populations. Treat as high priority for any organization running Siebel CRM 16.1, particularly if CRM data is sensitive or HTTP access is broadly reachable. The data confidentiality and integrity impact is material even though active exploitation is not evidenced in the supplied sources. Mitigation focus: Identify any Oracle Siebel CRM 16.1 deployments in production or exposed environments.; Check Oracle January 2017 CPU guidance for applicable Siebel CRM fixes.; Apply vendor-provided Siebel CRM security updates where applicable..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.