Threats tagged 'ghsa-7h72-rrr7-mqjv'

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It is difficult to exploit but allows an unauthenticated attacker with network access via TCP to potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes for multiple products including Siebel CRM.