Threats affecting pkg:maven/com.oracle.siebel/siebel-crm-cloud-applications

CVE-2026-61332 is a high-severity vulnerability in Oracle's Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3 through 26.6. It allows a high privileged attacker with network access via HTTP to compromise the application, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. While the flaw is specific to Siebel CRM Cloud Applications, exploitation may affect additional Oracle products. Oracle has published a Critical Security Patch Update advisory addressing this and other vulnerabilities, recommending that customers apply patches promptly. No known exploits in the wild have been reported yet.

CVE-2026-61330 is a high-severity vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the application, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Security Patch Update advisory addressing numerous vulnerabilities, including this one, and strongly recommends applying patches promptly.

CVE-2026-61317 is a critical vulnerability in Oracle's Siebel CRM Cloud Applications affecting versions 22.3 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the application, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS score of 9.9. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities. Customers are strongly advised to apply the relevant patches promptly to mitigate the risk.

CVE-2026-47018 is a high-severity vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3 through 26.5. It allows an unauthenticated attacker with network access via HTTPS to cause a denial of service (DoS) by hanging or crashing the application. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant impact on availability without affecting confidentiality or integrity.