CVE-2026-91448 is a vulnerability in the Oracle Siebel CRM Deployment product affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact but no impact on integrity or availability.
CVE-2026-91447 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has published a Critical Patch Update advisory that includes patches addressing this and other vulnerabilities.
CVE-2026-91446 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability. Oracle has released patches as part of their October 2026 Critical Patch Update, and customers are strongly advised to apply these patches promptly.
CVE-2026-91444 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment component, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91443 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity primarily impacting confidentiality. No public exploits or confirmed in-the-wild exploitation are reported. Oracle has released patches as part of its October 2026 Critical Patch Update and strongly recommends applying these patches promptly.
CVE-2026-91442 is a high-severity vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to fully compromise the Siebel CRM Deployment, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 8.8. Oracle has released patches for this and other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-91440 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read and write operations on accessible data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity with impacts on confidentiality and integrity but no impact on availability. Oracle has published a Critical Patch Update advisory that includes patches for this and other vulnerabilities.
CVE-2026-91438 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes on accessible data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts.
CVE-2026-91435 is a vulnerability in Oracle Siebel CRM Deployment versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to cause a denial of service by hanging or crashing the Siebel CRM Deployment server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity level. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains multiple security patches across various products.
CVE-2026-91434 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91427 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to cause a partial denial of service (DoS) on the Siebel CRM Deployment. The vulnerability has a low CVSS 3.1 base score of 2.3, indicating limited impact primarily on availability without confidentiality or integrity loss.
CVE-2026-91424 is a vulnerability in Oracle Siebel CRM Deployment versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to cause denial of service by hanging or crashing the service, and to gain unauthorized read and write access to some accessible data. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 6.4, indicating a medium severity impact on confidentiality, integrity, and availability.
CVE-2026-91423 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all accessible data within Siebel CRM Deployment. The CVSS 3.1 base score is 6.0, indicating a medium severity with high confidentiality and integrity impact but no availability impact.
CVE-2026-91422 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with integrity impact only. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
A vulnerability in Oracle Siebel CRM Deployment (versions 17.0 through 26.9) allows an unauthenticated attacker with network access via HTTP to cause a denial of service by hanging or crashing the service. The vulnerability is difficult to exploit and impacts availability without affecting confidentiality or integrity. The CVSS 3.1 base score is 5.9, indicating a medium severity. Oracle has published a Critical Patch Update advisory that includes patches for this and other vulnerabilities.
CVE-2026-101465 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to potentially compromise the Siebel CRM Deployment. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 6.3, indicating medium severity with high confidentiality and integrity impacts but no availability impact.
CVE-2026-101464 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts.
A vulnerability in Oracle Siebel CRM Deployment (versions 17.0 through 26.9) allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment. Successful exploitation can lead to unauthorized access to critical or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact.
CVE-2026-101461 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a high confidentiality impact but no impact on integrity or availability. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities, recommending prompt patching.
CVE-2026-101460 is a vulnerability in Oracle Siebel CRM Deployment server infrastructure affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via TLS to gain unauthorized access to critical or all accessible data in Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update advisory. Users are strongly advised to apply these patches promptly to mitigate the risk.