This vulnerability in Oracle Siebel CRM End User's Redwood UI allows a high privileged attacker with network access via HTTP to cause a partial denial of service. Exploitation is difficult and requires user interaction from someone other than the attacker. The vulnerability affects versions 24.4 through 26.3 and has a CVSS 3.1 score of 2.6 (AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:L). Successful exploitation may impact additional products beyond Siebel CRM End User due to scope change. No known exploits are reported in the wild. Oracle's July 2026 Critical Patch Update advisory lists this vulnerability but does not explicitly confirm patch availability or remediation details for this specific issue.

Successful exploitation can cause a partial denial of service (availability impact) on Siebel CRM End User. The vulnerability does not affect confidentiality or integrity but may affect other products due to scope change. Exploitation requires high privileges, network access via HTTP, and user interaction from a third party, making it difficult to exploit.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory for current remediation guidance. Oracle strongly recommends applying security patches without delay and remaining on actively supported versions. Since no explicit patch or temporary fix is stated for this vulnerability, monitoring Oracle advisories for updates is advised.