CVE-2026-101458 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or full access to all accessible data within the Siebel CRM Deployment. The attacker can also perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities, recommending customers apply patches promptly. No known exploits in the wild have been reported yet.
CVE-2026-101449 is a low-severity vulnerability in Oracle Siebel CRM Deployment (Siebel Management Console component) affecting versions 17.0 through 26.9. It allows an attacker with physical access to the system to gain unauthorized read access to some data within the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 2.4, indicating limited confidentiality impact without integrity or availability effects. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches for multiple products including Siebel CRM. Users are strongly advised to apply the available patches promptly to mitigate this issue.
CVE-2026-101448 is a vulnerability in Oracle Siebel CRM Deployment's Siebel Management Console component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact focused on confidentiality. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches addressing this and other vulnerabilities.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0 through 26.7. This vulnerability is difficult to exploit but allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Deployment. The CVSS 3.1 base score is 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes numerous security fixes across multiple products including Siebel Applications.
A vulnerability exists in the Siebel CRM Deployment product (component: Siebel Remote) of Oracle Siebel CRM affecting versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.
A vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affects supported versions 17.0 through 26.7. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized data modifications. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with significant confidentiality and integrity impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. The affected versions range from 17.0 through 26.7. This vulnerability allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially resulting in full takeover. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (Server Infrastructure component) affecting supported versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially resulting in full takeover. The CVSS 3.1 base score is 7.8, indicating high severity with impacts to confidentiality, integrity, and availability.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (Server Infrastructure component) affecting versions 17.0 through 26.7. This vulnerability allows a low-privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially resulting in complete takeover. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected products.
A high-severity vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It allows a low-privileged attacker with network access via HTTP to potentially compromise the Siebel CRM Deployment, leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It is difficult to exploit but allows an unauthenticated attacker with network access via TCP to potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes for multiple products including Siebel CRM.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. It affects supported versions from 17.0 through 26.7. The vulnerability allows a low privileged attacker with logon access to the infrastructure to potentially take over the Siebel CRM Deployment. Exploitation requires user interaction from someone other than the attacker. The CVSS 3.1 base score is 7.3, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (Server Infrastructure component) affecting versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Deployment. The CVSS 3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (Server Infrastructure component) affecting versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with access to the physical communication segment of the hardware running Siebel CRM Deployment to gain unauthorized access to critical data or cause a denial of service by crashing the application. The CVSS 3.1 base score is 7.3, indicating high severity with impacts on confidentiality and availability.
A vulnerability exists in the Installation component of Oracle Siebel CRM Deployment affecting versions 17.0 through 26.7. This vulnerability allows a low-privileged attacker with logon access to the infrastructure to potentially take over the Siebel CRM Deployment. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities across Oracle products.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. While the vulnerability is in Siebel CRM Deployment, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).