Threats affecting pkg:maven/com.oracle/siebel-crm-cloud-applications

26 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-60689Oracle Siebel CRM Cloud Applications · Missing Authentication High7.5EPSS 0.4%2026-07-21CVE Database V5CVE-2026-60689 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). EPSS 0.4%Vulnerability CWE-306	CVE Database V5	2026-07-21
High	8.8	EPSS 0.1%	CVE-2026-46926Oracle Siebel CRM Cloud Applications · Improper Access Control High8.8EPSS 0.1%2026-06-16CVE Database V5CVE-2026-46926 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). EPSS 0.1%Vulnerability CWE-284	CVE Database V5	2026-06-16
High	8.3	EPSS 0.3%	CVE-2026-46925Oracle Siebel CRM Cloud Applications · Improper Access Control High8.3EPSS 0.3%2026-06-16CVE Database V5CVE-2026-46925 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). EPSS 0.3%Vulnerability CWE-284	CVE Database V5	2026-06-16
High	8.8	EPSS 0.4%	CVE-2026-46921Oracle Siebel CRM Cloud Applications · Missing Authentication High8.8EPSS 0.4%2026-06-16CVE Database V5CVE-2026-46921 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-306	CVE Database V5	2026-06-16
High	8.1	EPSS 0.3%	CVE-2026-46920Oracle Siebel CRM Cloud Applications · Missing Authentication High8.1EPSS 0.3%2026-06-16CVE Database V5CVE-2026-46920 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). EPSS 0.3%Vulnerability CWE-306	CVE Database V5	2026-06-16
Critical	9.8	EPSS 0.4%	CVE-2026-46919Oracle Siebel CRM Cloud Applications · Missing Authentication Critical9.8EPSS 0.4%2026-06-16CVE Database V5CVE-2026-46919 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-306	CVE Database V5	2026-06-16

Page 2 of 2