Threats tagged 'ghsa-xghq-q534-jxjw'

A vulnerability exists in the Siebel CRM Deployment product (component: Siebel Remote) of Oracle Siebel CRM affecting versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.