Threats tagged 'ghsa-89hv-6h65-g25h'

A vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affects supported versions 22.3 through 26.7. It allows a low-privileged attacker with network access via HTTP to potentially compromise the application, resulting in unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with significant confidentiality and integrity impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for multiple products including Siebel Applications. Customers are strongly advised to apply the available patches promptly.