CVE-2026-47011: Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Deployment accessible data. in Oracle Corporation Siebel CRM Deployment
CVE-2026-47011 is a low-severity vulnerability in Oracle Siebel CRM Deployment (Application Interface component) affecting version 17.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data. Exploitation requires user interaction from someone other than the attacker, making it difficult to exploit. The vulnerability impacts confidentiality but not integrity or availability.
AI Analysis
Technical Summary
This vulnerability in Oracle Siebel CRM Deployment version 17.0 involves unauthorized read access to a subset of accessible data through the Application Interface component. It requires network access via HTTP and low privileges, with the additional requirement of human interaction by a third party. The CVSS 3.1 base score is 2.6, reflecting a low impact on confidentiality and no impact on integrity or availability. There is no vendor advisory indicating an official patch or fix at this time. The vulnerability is categorized under CWE-203 (Information Exposure Through Discrepancy).
Potential Impact
Successful exploitation can lead to unauthorized read access to some data within the Siebel CRM Deployment environment. There is no impact on data integrity or availability. The attack complexity is high due to the need for human interaction from a user other than the attacker, and the attacker must have network access with low privileges.
Mitigation Recommendations
Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying Critical Patch Updates promptly when available. Until a patch is released, organizations should consider limiting network exposure of the affected Siebel CRM Deployment interfaces and educate users to be cautious of unsolicited interactions that could trigger exploitation.
CVE-2026-47011: Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Deployment accessible data. in Oracle Corporation Siebel CRM Deployment
Description
CVE-2026-47011 is a low-severity vulnerability in Oracle Siebel CRM Deployment (Application Interface component) affecting version 17.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data. Exploitation requires user interaction from someone other than the attacker, making it difficult to exploit. The vulnerability impacts confidentiality but not integrity or availability.
CVSS v3.1
Score 2.6low
Affected software
pkg:maven/com.oracle.siebel/siebel-crm-deploymentRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Oracle Siebel CRM Deployment version 17.0 involves unauthorized read access to a subset of accessible data through the Application Interface component. It requires network access via HTTP and low privileges, with the additional requirement of human interaction by a third party. The CVSS 3.1 base score is 2.6, reflecting a low impact on confidentiality and no impact on integrity or availability. There is no vendor advisory indicating an official patch or fix at this time. The vulnerability is categorized under CWE-203 (Information Exposure Through Discrepancy).
Potential Impact
Successful exploitation can lead to unauthorized read access to some data within the Siebel CRM Deployment environment. There is no impact on data integrity or availability. The attack complexity is high due to the need for human interaction from a user other than the attacker, and the attacker must have network access with low privileges.
Mitigation Recommendations
Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying Critical Patch Updates promptly when available. Until a patch is released, organizations should consider limiting network exposure of the affected Siebel CRM Deployment interfaces and educate users to be cautious of unsolicited interactions that could trigger exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-05-18T15:55:10.316Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cpujul2026.html","vendor":"Oracle"}]
Threat ID: 6a5fe6c89c2644c7f8cb0771
Added to database: 07/21/2026, 21:38:16 UTC
Last enriched: 07/30/2026, 04:54:52 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.