Threat Intelligence Database

CVE-2026-62587 is a vulnerability in Oracle Siebel CRM Administration's Data Archival component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts.

CVE-2026-62586 is a high-severity vulnerability in Oracle Siebel CRM Administration's Data Archival component affecting versions 25.12 through 26.6. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM Administration. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact with no required privileges or user interaction. Although the vulnerability is localized to Siebel CRM Administration, exploitation may impact additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update that includes fixes for this and other vulnerabilities. No known exploits are reported in the wild at this time.

CVE-2026-62585 is a critical vulnerability in Oracle Siebel CRM Administration's Data Archival component affecting versions 25.12 through 26.6. It allows an unauthenticated attacker with network access via HTTP to fully compromise the Siebel CRM Administration, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.