This vulnerability in Oracle Siebel CRM Administration (Data Archival component) affects supported versions 25.12 through 26.6. It is easily exploitable by unauthenticated attackers over HTTP, enabling full compromise of the Siebel CRM Administration system. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability among many others but does not explicitly provide a direct patch link for this specific product version in the provided data.

Successful exploitation can lead to complete takeover of the Siebel CRM Administration system, compromising confidentiality, integrity, and availability of the affected system. This could allow attackers to control administrative functions and potentially disrupt business operations dependent on Siebel CRM.

Oracle strongly recommends applying the August 2026 Critical Security Patch Update, which includes numerous security fixes across Oracle products. Customers should ensure they are running actively supported versions and apply all relevant patches without delay. Since the advisory references a broad patch update, users should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for detailed patch availability and installation instructions specific to Siebel CRM Administration versions 25.12 through 26.6. Patch status is not explicitly confirmed in the provided data; therefore, users must verify current remediation guidance from Oracle.