Threat Intelligence Database

A critical vulnerability (CVE-2026-62512) exists in Oracle Siebel CRM Cloud Applications, specifically in the Siebel Cloud Manager component. This flaw affects versions from 22.3 through 26.6 and allows a low privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead to full takeover of the Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 9.9, indicating severe impacts on confidentiality, integrity, and availability. The vulnerability may also impact additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities, recommending prompt patching. No known exploits in the wild have been reported so far.

CVE-2026-62455 is a high-severity vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.6. It allows a low-privileged attacker with network access via HTTP to compromise the application, potentially leading to unauthorized creation, deletion, or modification of critical data, unauthorized read access to some data, and denial of service through application hangs or crashes. The vulnerability has a CVSS 3.1 base score of 8.3, reflecting impacts on confidentiality, integrity, and availability.

CVE-2026-62454 is a vulnerability in Oracle's Siebel CRM Cloud Applications affecting versions 22.3 through 26.6. It allows a low privileged attacker with logon access to the infrastructure hosting the application to compromise the Siebel CRM Cloud Applications, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.

CVE-2026-62442 is a high-severity vulnerability in Oracle's Siebel CRM Cloud Applications, specifically in the Siebel Cloud Manager component. It affects versions from 22.3 through 26.6. The vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the application to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or full access to all data accessible by the Siebel CRM Cloud Applications.

CVE-2026-61341 is a high-severity vulnerability in Oracle Siebel CRM Cloud Applications, specifically in the Siebel Cloud Manager component. It affects versions from 22.3 through 26.6. The flaw allows a low-privileged attacker with network access via HTTP to compromise the application, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-61332 is a high-severity vulnerability in Oracle's Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3 through 26.6. It allows a high privileged attacker with network access via HTTP to compromise the application, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. While the flaw is specific to Siebel CRM Cloud Applications, exploitation may affect additional Oracle products. Oracle has published a Critical Security Patch Update advisory addressing this and other vulnerabilities, recommending that customers apply patches promptly. No known exploits in the wild have been reported yet.

CVE-2026-61330 is a high-severity vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the application, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Security Patch Update advisory addressing numerous vulnerabilities, including this one, and strongly recommends applying patches promptly.

CVE-2026-61326 is a high-severity vulnerability in Oracle's Siebel CRM Cloud Applications, affecting versions 22.3 through 26.6. It allows a low-privileged attacker with network access via HTTP to compromise the application, potentially gaining unauthorized access to critical data and the ability to update, insert, or delete data. The vulnerability impacts confidentiality and integrity but not availability. Oracle has published a Critical Security Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for Siebel CRM Cloud Applications in the provided content.

CVE-2026-61317 is a critical vulnerability in Oracle's Siebel CRM Cloud Applications affecting versions 22.3 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the application, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS score of 9.9. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities. Customers are strongly advised to apply the relevant patches promptly to mitigate the risk.

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data as well as unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).