CVE-2026-46887 is a critical, easily exploitable vulnerability in Oracle Siebel Apps - Marketing (version 17.0) that allows unauthenticated remote attackers with HTTP network access to compromise the application completely. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Oracle's June 2026 Critical Security Patch Update advisory includes this vulnerability among 245 security patches and strongly recommends applying the update promptly. No explicit patch version for Siebel Apps - Marketing is provided in the advisory excerpt, but the vendor advises staying on supported versions and applying patches without delay. Mitigation options prior to patching include blocking network protocols used by the attack and restricting privileges, though these may affect application functionality.

The vulnerability allows an unauthenticated attacker with network access via HTTP to fully compromise Oracle Siebel Apps - Marketing version 17.0. This results in complete loss of confidentiality, integrity, and availability of the affected application, effectively enabling takeover of the system.

Oracle strongly recommends applying the June 2026 Critical Security Patch Update immediately to remediate this vulnerability. Until patches are applied, risk may be reduced by blocking network protocols required for exploitation and by removing unnecessary privileges from users. However, these mitigations may disrupt application functionality. Patch status is not explicitly confirmed in the advisory excerpt; therefore, check the Oracle advisory at https://www.oracle.com/security-alerts/cspujun2026.html for the latest patch availability and installation instructions.