Threats tagged 'ghsa-5mhc-9mj7-v8cc'

A critical vulnerability (CVE-2026-83197) exists in the Siebel Apps - Financial Services component of Oracle Siebel CRM, affecting versions 17.0 through 26.7. This vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to sensitive data or cause a denial of service by crashing the application. The CVSS 3.1 base score is 9.1, indicating high confidentiality and availability impact. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.