Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Marketing accessible data as well as unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
CVE-2026-101406 is a vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within the product. The vulnerability is rated as low severity with a CVSS 3.1 base score of 3.7, reflecting limited confidentiality impact and no impact on integrity or availability.
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 2.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 2.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
CVE-2026-101393 is a vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially perform unauthorized update, insert, or delete operations on accessible data. Exploitation requires human interaction from a user other than the attacker. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity primarily impacting data integrity.
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-83110 is a high-severity vulnerability in Oracle Marketing (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Oracle Marketing. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring user interaction or privileges.
CVE-2026-83084 is a vulnerability in Oracle Marketing, part of Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Marketing, potentially leading to unauthorized access to critical or all accessible data within Oracle Marketing. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity with significant confidentiality impact. The vulnerability also has scope change implications, potentially affecting additional Oracle products. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, strongly recommending patch application.
CVE-2026-83083 is a high-severity vulnerability in Oracle Marketing (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized modifications such as update, insert, or delete operations on Oracle Marketing accessible data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating significant confidentiality and integrity impacts. Attacks exploiting this vulnerability may also affect additional Oracle products due to scope change. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, and strongly recommends applying patches promptly.
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-73966 is a vulnerability in Oracle Siebel Apps - Marketing allowing a high privileged attacker with network access via HTTP to compromise the application. Affected versions range from 17.0 through 26.7. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Successful exploitation can result in full takeover of the Siebel Apps - Marketing component. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected products.
CVE-2026-70687 is a vulnerability in Oracle Marketing, part of Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Marketing, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a high severity with a CVSS 3.1 base score of 7.7, primarily impacting confidentiality. The vulnerability may also affect additional products due to scope change. Oracle has released a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities.
CVE-2026-60803 is a high-severity vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, modify, or access critical data within the affected product. The vulnerability is difficult to exploit but can lead to unauthorized access and data manipulation. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities, recommending customers apply patches promptly. No specific patch link for this vulnerability is provided in the advisory, so users should consult Oracle's August 2026 Critical Security Patch Update for remediation details.
CVE-2026-60767 is a high-severity vulnerability in Oracle Siebel Apps - Marketing that allows a low privileged attacker with network access via HTTP to compromise the application. The vulnerability affects versions from 17.0 through 26.6. Successful exploitation can lead to full takeover of the Siebel Apps - Marketing component, impacting confidentiality, integrity, and availability.
CVE-2026-60754 is a critical vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or cause a denial of service by hanging or crashing the application. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and availability impact.