CVE-2026-82992 is a high-severity vulnerability in Oracle Siebel CRM Deployment affecting versions 17.0 through 26.7. It allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially resulting in full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.8. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes.
CVE-2026-73965 is a vulnerability in Oracle Siebel CRM Deployment's Cloud Gateway component affecting versions 17.0 through 26.7. It allows a low privileged attacker with network access via HTTP to potentially gain unauthorized creation, deletion, or modification access to critical data or all accessible data within the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity with high confidentiality and integrity impact but no availability impact.
CVE-2026-70949 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches as part of their August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.
CVE-2026-70856 is a high-severity vulnerability in Oracle Siebel CRM Deployment (component: Migration) affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially take over the Siebel CRM Deployment. Exploitation is difficult and requires human interaction from a person other than the attacker. The vulnerability impacts confidentiality, integrity, and availability.
CVE-2026-60798 is a vulnerability in Oracle Siebel CRM Deployment's Migration component affecting versions 17.0 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the deployment, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with significant confidentiality and integrity impacts. Attacks may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities.
CVE-2026-60792 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, modify, or access critical data within the Siebel CRM Deployment. The vulnerability is difficult to exploit but can lead to unauthorized access and data manipulation. The CVSS 3.1 base score is 7.4, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities but does not explicitly confirm patch availability for this specific issue in the provided content.
CVE-2026-60791 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Application Interface component) affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running Siebel CRM Deployment to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by the deployment. The vulnerability has a CVSS 3.1 base score of 8.1, reflecting high confidentiality and integrity impacts but no availability impact.
CVE-2026-47011 is a low-severity vulnerability in Oracle Siebel CRM Deployment (Application Interface component) affecting version 17.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data. Exploitation requires user interaction from someone other than the attacker, making it difficult to exploit. The vulnerability impacts confidentiality but not integrity or availability.