Threats tagged 'ghsa-qhf4-3v9v-7phw'

A vulnerability exists in the Reports component of Oracle Siebel CRM End User product, affecting versions 17.0 through 26.7. This vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM End User. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high severity with a significant confidentiality impact. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes across multiple products including Siebel CRM.