Threat Intelligence Database

CVE-2026-70949 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches as part of their August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.

CVE-2026-70856 is a high-severity vulnerability in Oracle Siebel CRM Deployment (component: Migration) affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially take over the Siebel CRM Deployment. Exploitation is difficult and requires human interaction from a person other than the attacker. The vulnerability impacts confidentiality, integrity, and availability.

CVE-2026-60798 is a vulnerability in Oracle Siebel CRM Deployment's Migration component affecting versions 17.0 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the deployment, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with significant confidentiality and integrity impacts. Attacks may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities.

CVE-2026-60792 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, modify, or access critical data within the Siebel CRM Deployment. The vulnerability is difficult to exploit but can lead to unauthorized access and data manipulation. The CVSS 3.1 base score is 7.4, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities but does not explicitly confirm patch availability for this specific issue in the provided content.

CVE-2026-60791 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Application Interface component) affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running Siebel CRM Deployment to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by the deployment. The vulnerability has a CVSS 3.1 base score of 8.1, reflecting high confidentiality and integrity impacts but no availability impact.

CVE-2026-47011 is a low-severity vulnerability in Oracle Siebel CRM Deployment (Application Interface component) affecting version 17.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data. Exploitation requires user interaction from someone other than the attacker, making it difficult to exploit. The vulnerability impacts confidentiality but not integrity or availability.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-21926 is a high-severity vulnerability in Oracle Siebel CRM Deployment versions 17.0 through 25.2. It allows an unauthenticated attacker with network access via TLS to cause a denial of service (DoS) by triggering a hang or repeated crash of the Siebel CRM server infrastructure. The vulnerability does not impact confidentiality or integrity but severely affects availability. Exploitation requires no privileges or user interaction and can be performed remotely, making it easily exploitable. There are no known exploits in the wild yet, but the potential for disruption in business-critical CRM environments is significant. European organizations relying on Siebel CRM for customer management and operations could face service outages and operational disruptions. Mitigation should focus on applying vendor patches promptly once available, restricting network access to Siebel CRM servers, and monitoring for unusual traffic patterns. Countries with high adoption of Oracle Siebel CRM, such as the UK, Germany, France, and the Netherlands, are most at risk.

HighVulnerabilityGermanyFranceNetherlands+4#cve#cve-2026-21926