Threats affecting pkg:maven/com.oracle.siebel/marketing

CVE-2026-101406 is a vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within the product. The vulnerability is rated as low severity with a CVSS 3.1 base score of 3.7, reflecting limited confidentiality impact and no impact on integrity or availability.

A vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing component (Email Marketing) affects versions 17.0 through 26.9. This vulnerability allows an unauthenticated attacker with network access via HTTP to cause a partial denial of service. The vulnerability is rated with a low severity CVSS score of 3.7, primarily impacting availability. Oracle has published a Critical Patch Update advisory addressing multiple vulnerabilities, including this one, and strongly recommends applying patches promptly.

CVE-2026-101401 is a vulnerability in Oracle Siebel CRM's Marketing component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with logon access to the infrastructure where the application runs to cause a partial denial of service. The vulnerability is rated low severity with a CVSS 3.1 base score of 2.9, impacting availability only. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.

CVE-2026-101400 is a vulnerability in Oracle Siebel CRM's Marketing component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with logon access to the infrastructure where the product runs to cause a partial denial of service. The vulnerability is difficult to exploit and impacts availability with no confidentiality or integrity impact. The CVSS 3.1 base score is 2.9, indicating low severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.

CVE-2026-101399 is a vulnerability in Oracle Siebel CRM's Marketing component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via SMTP to cause a partial denial of service (DoS) on the Siebel Apps - Marketing product. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with impact limited to availability.

A vulnerability in Oracle Siebel CRM's Marketing component (versions 17.0 through 26.9) allows a high privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data. The vulnerability is difficult to exploit and has a low impact on confidentiality with no impact on integrity or availability. The CVSS 3.1 base score is 2.2. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.

CVE-2026-101394 is a vulnerability in Oracle Siebel CRM's Marketing component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible marketing data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact focused on integrity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.

CVE-2026-101393 is a vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially perform unauthorized update, insert, or delete operations on accessible data. Exploitation requires human interaction from a user other than the attacker. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity primarily impacting data integrity.

CVE-2026-73966 is a vulnerability in Oracle Siebel Apps - Marketing allowing a high privileged attacker with network access via HTTP to compromise the application. Affected versions range from 17.0 through 26.7. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Successful exploitation can result in full takeover of the Siebel Apps - Marketing component. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected products.

CVE-2026-60803 is a high-severity vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, modify, or access critical data within the affected product. The vulnerability is difficult to exploit but can lead to unauthorized access and data manipulation. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities, recommending customers apply patches promptly. No specific patch link for this vulnerability is provided in the advisory, so users should consult Oracle's August 2026 Critical Security Patch Update for remediation details.

CVE-2026-60767 is a high-severity vulnerability in Oracle Siebel Apps - Marketing that allows a low privileged attacker with network access via HTTP to compromise the application. The vulnerability affects versions from 17.0 through 26.6. Successful exploitation can lead to full takeover of the Siebel Apps - Marketing component, impacting confidentiality, integrity, and availability.

CVE-2026-60754 is a critical vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or cause a denial of service by hanging or crashing the application. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and availability impact.

CVE-2026-60752 is a high-severity vulnerability in Oracle Siebel Apps - Marketing that allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within the application. The vulnerability also permits the attacker to cause a partial denial of service. It affects versions from 17.0 through 26.6 inclusive. The CVSS 3.1 base score is 7.1, reflecting high confidentiality impact and low availability impact. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).