Threats affecting pkg:maven/com.oracle.siebel/siebel-crm-development

CVE-2026-101447 is a vulnerability in Oracle Siebel CRM Development's Workflow component affecting versions 25.12 through 26.9. It allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Development environment. Exploitation requires user interaction from someone other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on confidentiality, integrity, and availability.

A vulnerability exists in the Siebel CRM Development product of Oracle Siebel CRM, specifically in the Configuration Tools component. It affects supported versions from 17.0 through 26.7. The vulnerability requires network access and low privileges but is difficult to exploit. Successful exploitation can lead to full compromise of Siebel CRM Development, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.5, indicating high severity. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Development as well as unauthorized update, insert or delete access to some of Siebel CRM Development accessible data and unauthorized read access to a subset of Siebel CRM Development accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H).

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Development accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Development. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).