This vulnerability in Oracle Siebel CRM Integration (REST component) affects supported versions 17.0 through 26.6. It is difficult to exploit but allows a low-privileged attacker with network access over HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 8.5. Attacks exploiting this vulnerability may also impact other Oracle products due to scope change. Oracle's August 2026 Critical Security Patch Update includes fixes for this vulnerability among 943 security patches across multiple product families.

Successful exploitation can lead to complete compromise of the Siebel CRM Integration product, affecting confidentiality, integrity, and availability of the system. Due to scope change, additional Oracle products may also be impacted by attacks leveraging this vulnerability. The vulnerability requires network access via HTTP and low privileges but has a high impact if exploited.

Oracle has released security patches for this vulnerability as part of the August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk. Remaining on actively supported versions and timely patching are critical to prevent exploitation. No alternative mitigations or temporary fixes are indicated in the vendor advisory.