Threats tagged 'ghsa-2v9r-796c-gqx8'

A high-severity vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It allows a low-privileged attacker with network access via HTTP to potentially compromise the Siebel CRM Deployment, leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.