Siebel Engineering Installer & Deployment

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:siebel_engineering_-_installer_\&_deployment:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductSiebel Engineering Installer & Deployment (72152529-1882-50ca-ac8c-112db809ca0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5398 vulnerable 2026-06-08 05:26:42.768298 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
HIGH (8)
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Published: 2020-01-16T23:55:15.596Z
Updated: 2026-10-08T21:13:59.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20330 vulnerable 2026-06-08 05:13:40.445004 Details available
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
Published: 2020-01-03T03:35:52.000Z
Updated: 2026-10-08T18:48:10.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17531 vulnerable 2026-06-08 05:13:10.613770 Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.
Published: 2019-10-12T20:07:34.000Z
Updated: 2026-10-08T20:53:03.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16943 vulnerable 2026-06-08 05:13:09.658160 Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.
Published: 2019-10-01T16:06:23.000Z
Updated: 2026-10-07T20:05:10.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16942 vulnerable 2026-06-08 05:13:09.646997 Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.
Published: 2019-10-01T16:04:26.000Z
Updated: 2026-10-08T21:03:12.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14439 vulnerable 2026-06-08 05:12:54.854880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14379 vulnerable 2026-06-08 05:12:54.790689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14718 vulnerable 2026-06-08 05:10:53.352691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.