This vulnerability in Oracle Siebel CRM Cloud Applications enables an unauthenticated remote attacker to cause a hang or repeated crash of the application, resulting in a complete denial of service. The attack vector is network-based over HTTPS, requiring no privileges or user interaction. The vulnerability is classified under CWE-400 (Uncontrolled Resource Consumption). Affected versions include 22.3 through 26.5. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, reflecting high impact on availability only. Oracle has published a Critical Patch Update advisory in July 2026 covering multiple products, including Siebel CRM Cloud Applications, but no explicit patch or remediation level is stated for this specific vulnerability in the provided advisory content.

Successful exploitation results in unauthorized denial of service by causing the Siebel CRM Cloud Applications to hang or crash repeatedly. This disrupts availability but does not impact confidentiality or integrity of data. The vulnerability is exploitable remotely without authentication, increasing risk exposure.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. No specific workaround or temporary fix is provided in the advisory content.