This vulnerability in Oracle Siebel CRM Integration (Open Integration) affects supported versions 25.12 through 26.6. It permits an unauthenticated attacker with network access via HTTP to compromise the system, potentially resulting in unauthorized creation, deletion, or modification of critical data or complete access to all accessible data within Siebel CRM Integration. The vulnerability has a CVSS 3.1 score of 8.7 with high confidentiality and integrity impacts and requires high attack complexity. Oracle has addressed this issue in its August 2026 Critical Security Patch Update, which contains targeted patches for this and many other vulnerabilities.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Siebel CRM Integration, as well as unauthorized access to all accessible data. The vulnerability affects confidentiality and integrity but does not impact availability. The scope of impact may extend to additional Oracle products integrated with Siebel CRM Integration.

Oracle has released patches for this vulnerability as part of the August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk. Oracle recommends remaining on actively supported versions and applying security patches without delay. No additional mitigation steps are indicated beyond applying the official patches.