CVE-2026-60808: Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. While the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Marketing accessible data as wel
CVE-2026-60808 is a vulnerability in Oracle Siebel Apps - Marketing (Email Marketing component) affecting versions 17.0 through 26.6. It allows a low privileged attacker with logon access to the infrastructure where Siebel Apps - Marketing runs to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Siebel Apps - Marketing and potentially impact additional products. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with significant confidentiality and integrity impacts.
AI Analysis
Technical Summary
This vulnerability in Oracle Siebel Apps - Marketing's Email Marketing component allows an attacker with low privileges and logon access to the infrastructure to compromise the application. The scope of impact extends beyond Siebel Apps - Marketing to other products due to potential scope change. Exploitation can result in unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Siebel Apps - Marketing. The CVSS vector (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) indicates local attack vector, high attack complexity, low privileges required, no user interaction, scope changed, and high confidentiality and integrity impact without availability impact. The affected versions are from 17.0 up to and including 26.6. Oracle has published this vulnerability in their August 2026 Critical Security Patch Update advisory but no explicit patch link or fixed version is provided in the input data.
Potential Impact
An attacker with low privileges and logon access to the infrastructure hosting Siebel Apps - Marketing can exploit this vulnerability to gain unauthorized creation, deletion, or modification access to critical data within the product. The vulnerability also has a scope change, meaning it may affect additional Oracle products beyond Siebel Apps - Marketing. The confidentiality and integrity of data are highly impacted, potentially allowing full unauthorized access to all accessible data in Siebel Apps - Marketing. There is no impact on availability.
Mitigation Recommendations
Oracle has included this vulnerability in their August 2026 Critical Security Patch Update advisory. Customers are strongly advised to apply the relevant security patches promptly to mitigate this vulnerability. Since the input does not provide explicit patch availability or fixed versions, users should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch information and installation instructions. Maintaining actively supported versions and timely patch application is critical to prevent exploitation.
CVE-2026-60808: Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. While the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Marketing accessible data as wel
Description
CVE-2026-60808 is a vulnerability in Oracle Siebel Apps - Marketing (Email Marketing component) affecting versions 17.0 through 26.6. It allows a low privileged attacker with logon access to the infrastructure where Siebel Apps - Marketing runs to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Siebel Apps - Marketing and potentially impact additional products. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with significant confidentiality and integrity impacts.
CVSS v3.1
Score 7.5high
Affected software
Oracle Corporation
Siebel Apps - Marketing
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Oracle Siebel Apps - Marketing's Email Marketing component allows an attacker with low privileges and logon access to the infrastructure to compromise the application. The scope of impact extends beyond Siebel Apps - Marketing to other products due to potential scope change. Exploitation can result in unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Siebel Apps - Marketing. The CVSS vector (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) indicates local attack vector, high attack complexity, low privileges required, no user interaction, scope changed, and high confidentiality and integrity impact without availability impact. The affected versions are from 17.0 up to and including 26.6. Oracle has published this vulnerability in their August 2026 Critical Security Patch Update advisory but no explicit patch link or fixed version is provided in the input data.
Potential Impact
An attacker with low privileges and logon access to the infrastructure hosting Siebel Apps - Marketing can exploit this vulnerability to gain unauthorized creation, deletion, or modification access to critical data within the product. The vulnerability also has a scope change, meaning it may affect additional Oracle products beyond Siebel Apps - Marketing. The confidentiality and integrity of data are highly impacted, potentially allowing full unauthorized access to all accessible data in Siebel Apps - Marketing. There is no impact on availability.
Mitigation Recommendations
Oracle has included this vulnerability in their August 2026 Critical Security Patch Update advisory. Customers are strongly advised to apply the relevant security patches promptly to mitigate this vulnerability. Since the input does not provide explicit patch availability or fixed versions, users should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch information and installation instructions. Maintaining actively supported versions and timely patch application is critical to prevent exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-07-08T15:51:55.592Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cspuaug2026.html","vendor":"Oracle"}]
Threat ID: 6a84c9b5c6e8be0332bf09f2
Added to database: 08/18/2026, 21:08:05 UTC
Last enriched: 09/11/2026, 20:04:53 UTC
Last updated: 10/02/2026, 02:46:05 UTC
Views: 25
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.