Oracle Siebel CRM is a customer relationship management solution from Oracle Corporation that includes modules for sales management, marketing management, customer service systems, call centers, etc. Siebel UI Framework is one of the framework components based on the JavaScript language. A security vulnerability exists in the Siebel Core - Server Infrastructure component of CRM 21.5 and earlier versions. An attacker could exploit this vulnerability to gain unauthorized access to critical data or full access to all data accessible to the product.