Threats affecting pkg:maven/com.oracle.siebel/financial-services

CVE-2026-91430 is a vulnerability in Oracle Siebel CRM's Financial Services component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data and perform limited unauthorized modifications. The vulnerability is rated medium severity with a CVSS 3.1 base score of 6.5, indicating high confidentiality impact and low integrity impact. Oracle has published a Critical Patch Update advisory referencing this vulnerability, recommending timely patching. No public exploits or in-the-wild exploitation have been reported.

Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Financial Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Apps - Financial Services accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel Apps - Financial Services. CVSS 3.1 Base Score 9.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H).