Threats tagged 'ghsa-v2p8-3486-5mmp'

A vulnerability in the Oracle Siebel CRM End User product's Open UI component affects versions 17.0 through 26.7. This vulnerability allows an unauthenticated attacker with network access via HTTP to potentially take over the Siebel CRM End User. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 that addresses this and many other vulnerabilities across multiple products, including Siebel Applications. Customers are strongly advised to apply the available patches promptly.