Threat Intelligence Database

CVE-2026-70910 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM Integration. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring privileges or user interaction.

CVE-2026-70859 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows a low-privileged attacker with network access via HTTP to potentially take over the Siebel CRM Integration product. The vulnerability has significant confidentiality, integrity, and availability impacts and may also affect additional Oracle products due to scope change. Oracle has released security patches addressing this and many other vulnerabilities in their August 2026 Critical Security Patch Update.

CVE-2026-62596 is a high-severity vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update advisory referencing this vulnerability and strongly recommends applying security patches promptly. No explicit patch link for this specific CVE was provided in the input data.

CVE-2026-62594 is a high-severity vulnerability in Oracle Siebel CRM Integration (Open Integration component) affecting versions 25.12 through 26.6. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and cause denial of service through hangs or crashes. The vulnerability has a CVSS 3.1 base score of 7.7, reflecting integrity and availability impacts.

CVE-2026-62593 is a high-severity vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical or all accessible data within Siebel CRM Integration. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact without integrity or availability impact. Attacks may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities, recommending customers apply patches promptly. No specific patch links for this vulnerability were provided in the input data.

CVE-2026-62592 is a critical vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows an unauthenticated attacker with network access via HTTP to fully compromise the Siebel CRM Integration system. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this fix in its August 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant security patches promptly to mitigate this risk.

CVE-2026-62591 is a high-severity vulnerability in Oracle Siebel CRM Integration (Open Integration component) affecting versions 25.12 through 26.6. It allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible by Siebel CRM Integration.

CVE-2026-62590 is a high-severity vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the Siebel CRM Integration product. Successful exploitation can lead to full takeover of the Siebel CRM Integration and may impact additional Oracle products due to scope change. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high confidentiality, integrity, and availability impacts. Oracle has published a Critical Security Patch Update advisory that includes this vulnerability among many others, recommending prompt patch application. No specific exploit code is known to be in the wild at this time.

CVE-2026-62589 is a high-severity vulnerability in Oracle Siebel CRM Integration (Open Integration component) affecting versions 25.12 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the product, leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. Exploitation is considered difficult, and no known exploits are reported in the wild. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update with patches available for affected products.

CVE-2026-62588 is a critical vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the Siebel CRM Integration product. Successful exploitation can lead to full takeover of the Siebel CRM Integration and may impact additional Oracle products due to scope change. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts.