CVE-2026-91434 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91433 is a vulnerability in Oracle Siebel CRM's Siebel Apps - Field Service component (Smart Answer). It affects supported versions from 17.0 through 26.9. The flaw allows a high privileged attacker with network access via HTTP to compromise the affected component, potentially leading to full takeover. The CVSS 3.1 base score is 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities.
CVE-2026-91432 is a vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read and write operations on accessible data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity with confidentiality and integrity impacts but no availability impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-91431 is a vulnerability in Oracle Siebel CRM End User's Open UI component affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM End User application. The vulnerability can lead to unauthorized access to critical or all accessible data within Siebel CRM End User. The CVSS 3.1 base score is 5.5, indicating a medium severity with a high confidentiality impact but no integrity or availability impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-91430 is a vulnerability in Oracle Siebel CRM's Financial Services component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data and perform limited unauthorized modifications. The vulnerability is rated medium severity with a CVSS 3.1 base score of 6.5, indicating high confidentiality impact and low integrity impact. Oracle has published a Critical Patch Update advisory referencing this vulnerability, recommending timely patching. No public exploits or in-the-wild exploitation have been reported.
CVE-2026-91429 is a vulnerability in Oracle Siebel CRM Deployment versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized access to critical data and limited unauthorized modification of some data. The vulnerability is rated with a CVSS 3.1 base score of 6.5, indicating medium severity.
CVE-2026-91428 is a vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to cause unauthorized modification of accessible data, requiring user interaction from a person other than the attacker. The vulnerability impacts data integrity but not confidentiality or availability. The CVSS 3.1 base score is 4.3, indicating medium severity.
CVE-2026-91427 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to cause a partial denial of service (DoS) on the Siebel CRM Deployment. The vulnerability has a low CVSS 3.1 base score of 2.3, indicating limited impact primarily on availability without confidentiality or integrity loss.
CVE-2026-91426 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment component. Successful exploitation can lead to unauthorized access to critical or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has published a Critical Patch Update advisory that includes security patches addressing this and other vulnerabilities.
CVE-2026-91424 is a vulnerability in Oracle Siebel CRM Deployment versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to cause denial of service by hanging or crashing the service, and to gain unauthorized read and write access to some accessible data. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 6.4, indicating a medium severity impact on confidentiality, integrity, and availability.
CVE-2026-91423 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all accessible data within Siebel CRM Deployment. The CVSS 3.1 base score is 6.0, indicating a medium severity with high confidentiality and integrity impact but no availability impact.
CVE-2026-91422 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with integrity impact only. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
A vulnerability in Oracle Siebel CRM Deployment (versions 17.0 through 26.9) allows an unauthenticated attacker with network access via HTTP to cause a denial of service by hanging or crashing the service. The vulnerability is difficult to exploit and impacts availability without affecting confidentiality or integrity. The CVSS 3.1 base score is 5.9, indicating a medium severity. Oracle has published a Critical Patch Update advisory that includes patches for this and other vulnerabilities.
CVE-2026-91420 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to compromise the deployment. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data within Siebel CRM Deployment. The CVSS 3.1 base score is 6.5, indicating a medium severity with a high impact on integrity but no impact on confidentiality or availability.
CVE-2026-91414 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data. Exploitation is difficult and requires user interaction from someone other than the attacker. The vulnerability impacts confidentiality but not integrity or availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-91413 is a vulnerability in Oracle Siebel CRM Development's Integration - Scripting component affecting versions 17.0 through 26.9. It allows a high privileged attacker with network access via CORBA to cause denial of service by hanging or crashing the application, and to gain unauthorized read and write access to some accessible data. The vulnerability has a CVSS 3.1 base score of 6.0, indicating medium severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches across Oracle products. However, no specific patch link or fixed version is provided for this vulnerability in the available data.
CVE-2026-91412 is a vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible Siebel CRM End User data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, recommending patching to remediate the issue.
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM End User accessible data. CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM End User accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM End User accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).