CVE-2026-101464 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts.
CVE-2026-101463 is a high-severity vulnerability in Oracle Siebel CRM End User (UIF Open UI component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM End User. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting high confidentiality impact without requiring privileges or user interaction.
A vulnerability in Oracle Siebel CRM Deployment (versions 17.0 through 26.9) allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment. Successful exploitation can lead to unauthorized access to critical or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact.
CVE-2026-101461 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a high confidentiality impact but no impact on integrity or availability. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities, recommending prompt patching.
CVE-2026-101460 is a vulnerability in Oracle Siebel CRM Deployment server infrastructure affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via TLS to gain unauthorized access to critical or all accessible data in Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory. Users are strongly advised to apply these patches promptly to mitigate the risk.
CVE-2026-101459 is a high-severity vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data, unauthorized access to all accessible data, and partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.3, indicating significant confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities, recommending prompt patching.
CVE-2026-101458 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or full access to all accessible data within the Siebel CRM Deployment. The attacker can also perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities, recommending customers apply patches promptly. No known exploits in the wild have been reported yet.
CVE-2026-101457 is a high-severity vulnerability in Oracle Siebel Apps - Life Sciences (component: eDetailing) affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access to exploit SQL-based vectors to compromise the application. Successful exploitation can lead to full takeover of the Siebel Apps - Life Sciences environment, impacting confidentiality, integrity, and availability.
CVE-2026-101456 is a vulnerability in Oracle Siebel CRM Development's Configuration Tools component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure where Siebel CRM Development runs to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Siebel CRM Development. The CVSS 3.1 base score is 6.0, indicating a medium severity with high confidentiality and integrity impact but no availability impact.
CVE-2026-101455 is a vulnerability in Oracle Siebel CRM Development's Integration - Scripting component affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure where Siebel CRM Development runs to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or all accessible data within Siebel CRM Development. The vulnerability has a CVSS 3.1 base score of 6.3, indicating medium severity with high confidentiality and integrity impacts but no availability impact.
CVE-2026-101454 is a vulnerability in Oracle Siebel CRM Development's Configuration Tools component affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure where Siebel CRM Development runs to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data, as well as unauthorized read access to some data. The CVSS 3.1 base score is 6.1, indicating a medium severity vulnerability with impacts on confidentiality and integrity but no impact on availability.
CVE-2026-101453 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise and potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory that includes patches addressing this and other vulnerabilities.
CVE-2026-101451 is a high-severity vulnerability in Oracle's Siebel Life Sciences product (Web UI component) affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting confidentiality and integrity. The vulnerability also has scope change potential, possibly affecting additional products. Oracle has released patches as part of its October 2026 Critical Patch Update.
CVE-2026-101449 is a low-severity vulnerability in Oracle Siebel CRM Deployment (Siebel Management Console component) affecting versions 17.0 through 26.9. It allows an attacker with physical access to the system to gain unauthorized read access to some data within the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 2.4, indicating limited confidentiality impact without integrity or availability effects. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches for multiple products including Siebel CRM. Users are strongly advised to apply the available patches promptly to mitigate this issue.
CVE-2026-101448 is a vulnerability in Oracle Siebel CRM Deployment's Siebel Management Console component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact focused on confidentiality. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches addressing this and other vulnerabilities.
CVE-2026-101446 is a critical vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to compromise the application, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.9. Oracle has released patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-101408 is a vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing component (Email Marketing) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data, as well as unauthorized read access to some data. Successful exploitation requires human interaction from a user other than the attacker and may impact additional products beyond Siebel Apps - Marketing. The CVSS 3.1 base score is 6.1, indicating a medium severity with confidentiality and integrity impacts.
CVE-2026-101406 is a vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within the product. The vulnerability is rated as low severity with a CVSS 3.1 base score of 3.7, reflecting limited confidentiality impact and no impact on integrity or availability.
CVE-2026-101405 is a vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTPS to perform unauthorized read and write operations on some accessible data within the application. The vulnerability is rated medium severity with a CVSS 3.1 base score of 4.8, reflecting limited confidentiality and integrity impacts. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, indicating that patches are available.
CVE-2026-101404 is a vulnerability in Oracle Siebel CRM's Marketing component affecting versions 17.0 through 26.9. It requires a high privileged attacker with logon access to the infrastructure where the product runs. Exploitation could lead to unauthorized read, update, insert, or delete access to some accessible data and partial denial of service. The vulnerability is rated low severity with a CVSS 3.1 base score of 3.9.