This vulnerability in Oracle Siebel Artificial Intelligence (versions 25.12 to 26.6) permits a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized update, insert, or delete operations on accessible data. The vulnerability impacts confidentiality and integrity with a CVSS 3.1 score of 8.5 and has a scope change that may affect additional Oracle products. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability among many others and strongly recommends applying patches promptly. However, no explicit patch link or version fix is detailed for this specific vulnerability in the advisory content provided.

Successful exploitation can result in unauthorized access to critical data within Siebel Artificial Intelligence and unauthorized modification (update, insert, delete) of that data. The vulnerability affects confidentiality and integrity but does not impact availability. Additionally, the scope change indicates potential impact on other Oracle products beyond Siebel AI.

Oracle strongly recommends that customers remain on actively supported versions and apply security patches without delay as detailed in the August 2026 Critical Security Patch Update advisory. Although no specific patch link for this vulnerability is provided, applying the CSPU is the advised remediation. Monitor Oracle’s official security alerts for updates on patch availability and installation instructions.