CVE Catalog

CVE-2026-101451

HighCVSS 8.7
Published: Translated: NVD NIST

Summary

Vulnerability in Oracle Siebel CRM (component: Web UI) affects versions 17.0-26.9. A low-privileged attacker with network access via HTTP can exploit it with user interaction, potentially impacting additional products.

Risk Assessment

Potential unauthorized access to critical data and modification or deletion, with possible impact on related systems.

Recommendation

Update Oracle Siebel CRM to the latest version and train users to avoid interacting with suspicious content.

Other vulnerabilities in Oracle Siebel CRM

See all
Original NVD description (English source)

Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Life Sciences. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Life Sciences, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Life Sciences accessible data as well as unauthorized access to critical data or complete access to all Siebel Life Sciences accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS