Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N).
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data as well as unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N).
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Cloud Applications accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
CVE-2026-91362 is a vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact focused on confidentiality. Oracle has published a Critical Patch Update advisory that includes patches for this and other vulnerabilities.
CVE-2026-91359 is a vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to certain accessible data within Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact limited to confidentiality without affecting integrity or availability.
A vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affects supported versions 22.3 through 26.7. It allows a low-privileged attacker with network access via HTTP to potentially compromise the application, resulting in unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with significant confidentiality and integrity impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for multiple products including Siebel Applications. Customers are strongly advised to apply the available patches promptly.
A vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affects supported versions 22.3 through 26.7. It allows a high privileged attacker with logon access to the infrastructure to compromise the application, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 7.9, indicating high severity with significant confidentiality and integrity impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
A high-severity vulnerability (CVE-2026-83074) exists in the Siebel CRM Cloud Applications product, specifically in the Siebel Cloud Manager component. It affects supported versions from 22.3 through 26.7. The flaw allows an unauthenticated attacker with network access via SSH to gain unauthorized access to critical data within Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact with no required privileges or user interaction. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-83085 is a high-severity vulnerability in Oracle's Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3 through 26.7. It allows a low-privileged attacker with access to the physical communication segment of the hardware running the application to compromise the system. Successful exploitation can lead to unauthorized access to critical data, unauthorized modification of some data, and partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products. Customers are strongly advised to apply Oracle's security patches promptly to mitigate this risk.
CVE-2026-83077 is a vulnerability in Oracle's Siebel CRM Cloud Applications affecting versions 22.3 through 26.7. It allows a low privileged attacker with network access via HTTP to perform unauthorized update, insert, delete, and read operations on accessible data within Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 6.4, indicating medium severity with confidentiality and integrity impacts. The vulnerability may also impact additional Oracle products beyond Siebel CRM Cloud Applications. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, and strongly recommends applying patches promptly.
A critical vulnerability (CVE-2026-62512) exists in Oracle Siebel CRM Cloud Applications, specifically in the Siebel Cloud Manager component. This flaw affects versions from 22.3 through 26.6 and allows a low privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead to full takeover of the Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 9.9, indicating severe impacts on confidentiality, integrity, and availability. The vulnerability may also impact additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities, recommending prompt patching. No known exploits in the wild have been reported so far.
CVE-2026-62455 is a high-severity vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.6. It allows a low-privileged attacker with network access via HTTP to compromise the application, potentially leading to unauthorized creation, deletion, or modification of critical data, unauthorized read access to some data, and denial of service through application hangs or crashes. The vulnerability has a CVSS 3.1 base score of 8.3, reflecting impacts on confidentiality, integrity, and availability.
CVE-2026-62454 is a vulnerability in Oracle's Siebel CRM Cloud Applications affecting versions 22.3 through 26.6. It allows a low privileged attacker with logon access to the infrastructure hosting the application to compromise the Siebel CRM Cloud Applications, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-62442 is a high-severity vulnerability in Oracle's Siebel CRM Cloud Applications, specifically in the Siebel Cloud Manager component. It affects versions from 22.3 through 26.6. The vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the application to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or full access to all data accessible by the Siebel CRM Cloud Applications.
CVE-2026-61341 is a high-severity vulnerability in Oracle Siebel CRM Cloud Applications, specifically in the Siebel Cloud Manager component. It affects versions from 22.3 through 26.6. The flaw allows a low-privileged attacker with network access via HTTP to compromise the application, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability.