This vulnerability in Oracle Siebel CRM Integration's Open Integration component affects versions from 25.12 up to and including 26.6. It is exploitable remotely over HTTP by unauthenticated attackers but requires user interaction from a third party. The vulnerability can result in high confidentiality and integrity impacts, including unauthorized creation, deletion, modification, or access to critical data within the Siebel CRM Integration environment. The CVSS 3.1 base score is 8.1, reflecting network attack vector, low attack complexity, no privileges required, but requiring user interaction, with high confidentiality and integrity impacts and no availability impact.

Exploitation of this vulnerability can lead to unauthorized creation, deletion, or modification of critical data or all data accessible by Siebel CRM Integration. It also allows unauthorized access to critical or all accessible data within the product. This compromises the confidentiality and integrity of the affected system's data, potentially leading to significant business impact.

Oracle has released security patches as part of its August 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant patches promptly to affected versions (>=25.12 <=26.6). Staying on actively supported versions and timely patching are critical to mitigating this vulnerability. No indication from the vendor advisory suggests that no action is required or that the issue is already mitigated without patching.