Threats tagged 'ghsa-974f-m982-85hq'

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI) affecting supported versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with network access via SOAP to gain unauthorized access to critical data and perform unauthorized update, insert, or delete operations on some accessible data. The CVSS 3.1 base score is 7.1, indicating a high severity issue with significant confidentiality and integrity impacts. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.