Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVE-2026-87339 is a vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Siebel CRM Integration data. Exploitation is difficult and requires user interaction by someone other than the attacker. The vulnerability has a low severity with a CVSS 3.1 base score of 3.1, impacting confidentiality only.
CVE-2026-101508 is a vulnerability in Oracle Siebel CRM Integration (component: EAI) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to cause a denial of service by hanging or crashing the Siebel CRM Integration component. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity due to its impact on availability.
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe). Supported versions that are affected are 23.6-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Integration executes to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Integration accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
CVE-2026-70859 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows a low-privileged attacker with network access via HTTP to potentially take over the Siebel CRM Integration product. The vulnerability has significant confidentiality, integrity, and availability impacts and may also affect additional Oracle products due to scope change. Oracle has released security patches addressing this and many other vulnerabilities in their August 2026 Critical Security Patch Update.
CVE-2026-62596 is a high-severity vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update advisory referencing this vulnerability and strongly recommends applying security patches promptly. No explicit patch link for this specific CVE was provided in the input data.
CVE-2026-62594 is a high-severity vulnerability in Oracle Siebel CRM Integration (Open Integration component) affecting versions 25.12 through 26.6. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and cause denial of service through hangs or crashes. The vulnerability has a CVSS 3.1 base score of 7.7, reflecting integrity and availability impacts.
CVE-2026-62593 is a high-severity vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical or all accessible data within Siebel CRM Integration. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact without integrity or availability impact. Attacks may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities, recommending customers apply patches promptly. No specific patch links for this vulnerability were provided in the input data.
CVE-2026-62592 is a critical vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows an unauthenticated attacker with network access via HTTP to fully compromise the Siebel CRM Integration system. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this fix in its August 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant security patches promptly to mitigate this risk.
CVE-2026-62591 is a high-severity vulnerability in Oracle Siebel CRM Integration (Open Integration component) affecting versions 25.12 through 26.6. It allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible by Siebel CRM Integration.
CVE-2026-62590 is a high-severity vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the Siebel CRM Integration product. Successful exploitation can lead to full takeover of the Siebel CRM Integration and may impact additional Oracle products due to scope change. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high confidentiality, integrity, and availability impacts. Oracle has published a Critical Security Patch Update advisory that includes this vulnerability among many others, recommending prompt patch application. No specific exploit code is known to be in the wild at this time.
CVE-2026-62589 is a high-severity vulnerability in Oracle Siebel CRM Integration (Open Integration component) affecting versions 25.12 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the product, leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. Exploitation is considered difficult, and no known exploits are reported in the wild. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update with patches available for affected products.
CVE-2026-62588 is a critical vulnerability in Oracle Siebel CRM Integration's Open Integration component affecting versions 25.12 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the Siebel CRM Integration product. Successful exploitation can lead to full takeover of the Siebel CRM Integration and may impact additional Oracle products due to scope change. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts.
CVE-2026-60820 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, or modify critical data or gain unauthorized access to all data accessible through Siebel CRM Integration. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.4, indicating high confidentiality and integrity impacts but no availability impact. Oracle has published a Critical Security Patch Update including fixes for this and other vulnerabilities, strongly recommending customers apply patches promptly.
CVE-2026-60797 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTPS to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or unauthorized access to all data accessible through Siebel CRM Integration. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.4, reflecting high confidentiality and integrity impacts but no availability impact.
CVE-2026-60766 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTPS to potentially create, delete, or modify critical data, or gain unauthorized access to all data accessible through Siebel CRM Integration. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.4, indicating high confidentiality and integrity impacts but no availability impact. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, recommending timely patching to mitigate risk.