Threats affecting pkg:maven/com.oracle.siebel/siebel-crm-end-user-open-ui

A vulnerability in Oracle Siebel CRM End User product (Open UI component) affects versions 17.0 through 26.7. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, perform unauthorized data modifications, and cause partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.6, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update addressing this and other vulnerabilities and strongly recommends applying patches promptly.

A vulnerability in the Oracle Siebel CRM End User product's Open UI component affects versions 17.0 through 26.7. This vulnerability allows an unauthenticated attacker with network access via HTTP to potentially take over the Siebel CRM End User. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 that addresses this and many other vulnerabilities across multiple products, including Siebel Applications. Customers are strongly advised to apply the available patches promptly.