This vulnerability exists in Oracle Siebel Apps - Marketing (component: Marketing) version 17.0. It is easily exploitable by an attacker with low privileges who has network access via HTTP. Successful exploitation can result in complete compromise of the Siebel Apps - Marketing application. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's Critical Security Patch Update advisory for August 2026 references multiple patches across many products but does not explicitly confirm patch availability or remediation status for this specific CVE.

An attacker with low privileges and network access via HTTP can exploit this vulnerability to fully compromise the Siebel Apps - Marketing application. This includes complete loss of confidentiality, integrity, and availability of the affected application. The impact is rated high with a CVSS score of 8.8.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. No explicit patch or temporary fix details for this vulnerability are provided in the advisory content.