Threats affecting pkg:maven/com.oracle.siebel/siebel-apps-marketing

CVE-2026-101476 is a vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data. Exploitation requires human interaction from a user other than the attacker. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity with integrity impact only.

CVE-2026-101408 is a vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing component (Email Marketing) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data, as well as unauthorized read access to some data. Successful exploitation requires human interaction from a user other than the attacker and may impact additional products beyond Siebel Apps - Marketing. The CVSS 3.1 base score is 6.1, indicating a medium severity with confidentiality and integrity impacts.

CVE-2026-101404 is a vulnerability in Oracle Siebel CRM's Marketing component affecting versions 17.0 through 26.9. It requires a high privileged attacker with logon access to the infrastructure where the product runs. Exploitation could lead to unauthorized read, update, insert, or delete access to some accessible data and partial denial of service. The vulnerability is rated low severity with a CVSS 3.1 base score of 3.9.

CVE-2026-101403 is a vulnerability in Oracle Siebel CRM's Email Marketing component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the product, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and limited unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 5.9, indicating medium severity.

CVE-2026-101396 is a vulnerability in Oracle Siebel Apps - Marketing versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure where the application runs to compromise the application. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data within Siebel Apps - Marketing. The vulnerability has a CVSS 3.1 base score of 4.7, indicating a medium severity with integrity impact but no confidentiality or availability impact.

CVE-2026-101395 is a vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data, as well as unauthorized read access to some data. Successful exploitation requires user interaction from a person other than the attacker and may impact additional products beyond Siebel Apps - Marketing. The vulnerability has a CVSS 3.1 base score of 6.1, indicating medium severity with confidentiality and integrity impacts.

CVE-2026-101391 is a vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some accessible data, as well as unauthorized read access to a subset of data. Successful exploitation requires user interaction from someone other than the attacker and may impact additional products beyond Siebel Apps - Marketing. The CVSS 3.1 base score is 6.1, indicating a medium severity vulnerability with confidentiality and integrity impacts.

CVE-2026-60751 is a high-severity vulnerability in Oracle Siebel Apps - Marketing that allows a low privileged attacker with network access via HTTP to compromise the application. The vulnerability affects versions from 17.0 through 26.6 inclusive. Successful exploitation can lead to full takeover of the Siebel Apps - Marketing component, impacting confidentiality, integrity, and availability. Oracle has published a Critical Security Patch Update advisory that includes security fixes for this and other vulnerabilities. Users are strongly advised to apply Oracle's security patches promptly to mitigate this risk.

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).