This vulnerability in Oracle Siebel CRM Integration (REST component) affects supported versions 17.0 to 26.6. It is easily exploitable by unauthenticated attackers over the network via HTTP, enabling unauthorized access to critical or all accessible data within the product. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) reflects network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact with no integrity or availability impact. Oracle has published a Critical Security Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for this specific issue in the provided content.

Successful exploitation results in unauthorized access to critical or all accessible data in Siebel CRM Integration. The vulnerability compromises confidentiality but does not affect integrity or availability. There are no known exploits in the wild reported at this time.

Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. The vendor advisory references a Critical Security Patch Update released in August 2026 that addresses multiple vulnerabilities, including this one. Customers should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for patch availability and installation instructions. Patch status for this specific vulnerability is not explicitly confirmed in the advisory excerpt; therefore, users should verify current remediation guidance from Oracle.