CVE-2026-91450 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, or modify critical data or gain unauthorized access to all accessible data within Siebel CRM Deployment. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.4, reflecting high confidentiality and integrity impacts but no availability impact. The vulnerability is considered difficult to exploit due to the required conditions.
CVE-2026-91449 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all accessible data within Siebel CRM Deployment. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.4, reflecting high confidentiality and integrity impacts but no availability impact.
CVE-2026-91439 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact.
CVE-2026-91437 is a high-severity vulnerability in Oracle Siebel CRM Deployment (versions 17.0 through 26.9) that allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 8.7. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities, recommending customers apply patches promptly.
CVE-2026-91436 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It requires high privileges and local access, making exploitation difficult. Successful exploitation could allow unauthorized read, insert, update, or delete access to some accessible data and cause a partial denial of service. The CVSS 3.1 base score is 3.9, indicating low severity.
CVE-2026-91429 is a vulnerability in Oracle Siebel CRM Deployment versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized access to critical data and limited unauthorized modification of some data. The vulnerability is rated with a CVSS 3.1 base score of 6.5, indicating medium severity.
CVE-2026-91426 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment component. Successful exploitation can lead to unauthorized access to critical or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has published a Critical Patch Update advisory that includes security patches addressing this and other vulnerabilities.
CVE-2026-91420 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to compromise the deployment. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data within Siebel CRM Deployment. The CVSS 3.1 base score is 6.5, indicating a medium severity with a high impact on integrity but no impact on confidentiality or availability.
CVE-2026-91414 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data. Exploitation is difficult and requires user interaction from someone other than the attacker. The vulnerability impacts confidentiality but not integrity or availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-101468 is a vulnerability in Oracle Siebel CRM Deployment's Cloud Gateway component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact but no impact on integrity or availability.
CVE-2026-101459 is a high-severity vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data, unauthorized access to all accessible data, and partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.3, indicating significant confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities, recommending prompt patching.
CVE-2026-101453 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise and potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory that includes patches addressing this and other vulnerabilities.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-21926 is a high-severity vulnerability in Oracle Siebel CRM Deployment versions 17.0 through 25.2. It allows an unauthenticated attacker with network access via TLS to cause a denial of service (DoS) by triggering a hang or repeated crash of the Siebel CRM server infrastructure. The vulnerability does not impact confidentiality or integrity but severely affects availability. Exploitation requires no privileges or user interaction and can be performed remotely, making it easily exploitable. There are no known exploits in the wild yet, but the potential for disruption in business-critical CRM environments is significant. European organizations relying on Siebel CRM for customer management and operations could face service outages and operational disruptions. Mitigation should focus on applying vendor patches promptly once available, restricting network access to Siebel CRM servers, and monitoring for unusual traffic patterns. Countries with high adoption of Oracle Siebel CRM, such as the UK, Germany, France, and the Netherlands, are most at risk.
