CVE-2026-47036

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 25/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

26th percentile - higher than 26% of all known CVEs

Summary

Vulnerability in Siebel CRM Development (Siebel Approval Manager component) allows an unauthenticated attacker via HTTP to fully compromise the system.

Risk Assessment

The risk is critical (CVSS 9.8) – an attacker can take over Siebel CRM Development, leading to a complete security breach.

Recommendation

Apply the Oracle patch for versions 17.0-26.3. Restrict HTTP access to trusted networks only.

Original NVD description (English source)

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).