CVE-2026-60357

LowCVSS 3.7

Published: 21/07/2026(UTC)Updated: 05/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Siebel Server Sync for Exchange) in versions 17.0-26.5. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some Siebel CRM Integration data. CVSS 3.1 Base Score 3.7 (Integrity impact).

Risk Assessment

The organization is at risk of unauthorized data modification in Siebel CRM Integration by an unauthenticated attacker, which could compromise data integrity.

Recommendation

Apply the patch available in the Oracle Critical Patch Update for the corresponding Oracle Siebel CRM version.

Original NVD description (English source)

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Siebel Server Sync for Exchange). Supported versions that are affected are 17.0-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).