CVE-2026-101454 is a vulnerability in Oracle Siebel CRM Development's Configuration Tools component affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure where Siebel CRM Development runs to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data, as well as unauthorized read access to some data. The CVSS 3.1 base score is 6.1, indicating a medium severity vulnerability with impacts on confidentiality and integrity but no impact on availability.
CVE-2026-101453 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise and potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory that includes patches addressing this and other vulnerabilities.
CVE-2026-101452 is a vulnerability in Oracle Autonomous Health Framework versions 26.3 through 26.8. It allows a low privileged attacker with logon access to the infrastructure where the framework executes to compromise it, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101451 is a high-severity vulnerability in Oracle's Siebel Life Sciences product (Web UI component) affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting confidentiality and integrity. The vulnerability also has scope change potential, possibly affecting additional products. Oracle has released patches as part of its October 2026 Critical Patch Update.
CVE-2026-101450 is a high-severity vulnerability in Oracle PeopleSoft Enterprise PeopleTools Integration Broker component versions 8.61 through 8.63. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification (update, insert, delete) of some accessible data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating significant confidentiality and integrity impacts.
CVE-2026-101449 is a low-severity vulnerability in Oracle Siebel CRM Deployment (Siebel Management Console component) affecting versions 17.0 through 26.9. It allows an attacker with physical access to the system to gain unauthorized read access to some data within the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 2.4, indicating limited confidentiality impact without integrity or availability effects. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches for multiple products including Siebel CRM. Users are strongly advised to apply the available patches promptly to mitigate this issue.
CVE-2026-101448 is a vulnerability in Oracle Siebel CRM Deployment's Siebel Management Console component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact focused on confidentiality. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches addressing this and other vulnerabilities.
CVE-2026-101447 is a vulnerability in Oracle Siebel CRM Development's Workflow component affecting versions 25.12 through 26.9. It allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Development environment. Exploitation requires user interaction from someone other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101446 is a critical vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to compromise the application, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.9. Oracle has released patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
A vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affects versions 22.3 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to potentially compromise the application, resulting in unauthorized read and write access to some accessible data. The vulnerability is difficult to exploit and has a low CVSS score of 3.6.
CVE-2026-101444 is a vulnerability in Oracle Siebel CRM Cloud Applications, specifically in the Siebel Cloud Manager component. It affects versions from 22.3 through 26.9. The flaw allows a low privileged attacker with logon access to the infrastructure hosting Siebel CRM Cloud Applications to compromise the application, potentially gaining unauthorized access to critical or all accessible data. The CVSS 3.1 base score is 5.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability.
CVE-2026-101443 is a vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It allows a low privileged attacker with network access via LDAP to gain unauthorized access to critical data or potentially all accessible data within the Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability. Oracle has published a Critical Patch Update advisory that includes patches for this and other vulnerabilities.
CVE-2026-101442 is a low-severity vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data within the application. The vulnerability is difficult to exploit and does not impact integrity or availability. Oracle has released patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update.
CVE-2026-101441 is a medium severity vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It allows an unauthenticated attacker with physical access to the communication segment attached to the hardware running the application to compromise the system, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a moderate confidentiality impact without integrity or availability effects. Oracle has published a Critical Patch Update advisory including patches for this and other vulnerabilities.
CVE-2026-101440 is a vulnerability in Oracle's Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the application to compromise the system. Successful exploitation can lead to unauthorized access to critical data and partial unauthorized modification (update, insert, delete) of accessible data. The vulnerability has a CVSS 3.1 base score of 5.9, indicating medium severity.
CVE-2026-101439 is a vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It allows an unauthenticated attacker with network access via LDAP to potentially gain unauthorized access to critical data or all accessible data within Siebel CRM Cloud Applications. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.9, primarily impacting confidentiality. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities.
CVE-2026-101438 is a vulnerability in Oracle's Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3 through 26.9. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the application to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains patches for multiple products including Siebel CRM Cloud Applications. Customers are strongly advised to apply the available patches promptly.
CVE-2026-101437 is a vulnerability in Oracle's Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It allows a high privileged attacker with network access via HTTP to compromise the application, potentially leading to unauthorized creation, deletion, modification, or read access to critical data. The vulnerability has a CVSS 3.1 base score of 6.6, indicating medium severity. The vulnerability also has scope change implications, potentially impacting additional products beyond Siebel CRM Cloud Applications.
CVE-2026-101436 is a vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It requires a high privileged attacker with logon access to the infrastructure hosting the application. Successful exploitation can lead to unauthorized access to critical or all accessible data within Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 4.1, indicating a medium severity with confidentiality impact only.
CVE-2026-101435 is a vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Porting) affecting versions 8.61 through 8.63. It allows a low privileged attacker with logon access to the infrastructure to cause denial of service by hanging or crashing the application, and to gain unauthorized read and write access to some accessible data. The vulnerability has a CVSS 3.1 base score of 6.6, indicating medium severity with impacts on confidentiality, integrity, and availability.