Threats affecting pkg:maven/com.oracle/marketing

24 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.4%	CVE-2026-60752Oracle Siebel Apps – Marketing · Improper Access Control High7.1EPSS 0.4%2026-08-18CVE Database V5CVE-2026-60752 CVE-2026-60752 is a high-severity vulnerability in Oracle Siebel Apps - Marketing that allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within the application. The vulnerability also permits the attacker to cause a partial denial of service. It affects versions from 17.0 through 26.6 inclusive. The CVSS 3.1 base score is 7.1, reflecting high confidentiality impact and low availability impact. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products. EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-08-18
Critical	9.8	EPSS 0.5%	CVE-2026-46889Oracle Siebel Apps – Marketing · Improper Access Control Critical9.8EPSS 0.5%2026-06-16CVE Database V5CVE-2026-46889 Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-284	CVE Database V5	2026-06-16
Critical	9.8	EPSS 0.6%	CVE-2025-62481Oracle Marketing · Missing Authentication Critical9.8EPSS 0.6%2025-10-21CVE Database V5CVE-2025-62481 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). EPSS 0.6%Vulnerability CWE-306	CVE Database V5	2025-10-21
Critical	9.8	EPSS 0.6%	CVE-2025-53072Oracle Marketing · Missing Authentication Critical9.8EPSS 0.6%2025-10-21CVE Database V5CVE-2025-53072 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). EPSS 0.6%Vulnerability CWE-306	CVE Database V5	2025-10-21

Page 2 of 2