Threats tagged 'ghsa-7r6w-2wxh-xr2f'

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. It affects supported versions from 17.0 through 26.7. The vulnerability allows a low privileged attacker with logon access to the infrastructure to potentially take over the Siebel CRM Deployment. Exploitation requires user interaction from someone other than the attacker. The CVSS 3.1 base score is 7.3, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.