CVE-2026-62452 is an easily exploitable vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) versions 22.3 to 26.6. It permits unauthenticated attackers with network access over HTTP to compromise the application, resulting in unauthorized access to critical data, unauthorized data modification (update, insert, delete), and partial denial of service. The vulnerability has a CVSS 3.1 score of 9.9 with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality (high), integrity (low), and availability (low) with scope change. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability as part of a large set of patches but does not explicitly confirm patch availability for this specific issue. Customers are urged to apply security patches without delay.

Successful exploitation can lead to unauthorized access to all accessible data within Siebel CRM Cloud Applications, unauthorized data modification, and partial denial of service. The vulnerability affects confidentiality, integrity, and availability with high severity, potentially compromising critical business data and application functionality.

Oracle strongly recommends that customers remain on actively supported versions and apply security patches promptly as detailed in the August 2026 Critical Security Patch Update advisory (https://www.oracle.com/security-alerts/cspuaug2026.html). Patch status for this specific vulnerability is not explicitly stated; therefore, users should consult the vendor advisory for current remediation guidance. No indication is given that the vulnerability is already mitigated or requires no action.