A vulnerability exists in the Siebel Apps - Life Sciences product of Oracle Siebel CRM affecting versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with logon access to the infrastructure to potentially take over the Siebel Apps - Life Sciences component. Exploitation requires user interaction from a person other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity with impacts to confidentiality, integrity, and availability. Oracle has included fixes for this vulnerability in its September 2026 Critical Security Patch Update.