CVE-2026-60751
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Vulnerability in Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Affects versions 17.0-26.6. Easily exploitable, allows low privileged attacker via HTTP to take over Siebel Apps - Marketing.
Risk Assessment
Risk of complete takeover of Siebel Apps - Marketing, potentially leading to compromise of confidentiality, integrity and availability.
Recommendation
Apply Oracle patches. Restrict user privileges and monitor HTTP traffic.
Other vulnerabilities in Siebel Apps - Marketing
See all- CVE-2026-60754Critical
Vulnerability in Siebel Apps - Marketing (Marketing component) versions 17.0-26.6. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing full data access and complete denial of service (hang or frequent crashes). CVSS score 9.1.
- CVE-2026-46890Critical
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM allows an unauthenticated attacker with network access via HTTP to compromise the application. Affected versions are 17.0-26.5.
- CVE-2026-46889Critical
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM allows an unauthenticated attacker with network access via HTTP to compromise the application. Affected versions are 17.0-26.5.
- CVE-2026-46887Critical
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM allows an unauthenticated attacker with network access via HTTP to compromise the application. Affected versions are 17.0-26.5.
- CVE-2026-46884Critical
A vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM allows an unauthenticated attacker with network access via HTTP to compromise the application. Supported versions affected are 17.0-26.5.
- CVE-2026-60808High
Vulnerability in Siebel Apps - Marketing (component: Email Marketing). Affects versions 17.0-26.6. Difficult to exploit, requires local access and low privileges. Attack may impact additional products (scope change).
- CVE-2026-60803High
Vulnerability in Siebel Apps - Marketing (component: Marketing). Affects versions 17.0-26.6. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to data and modify it.
- CVE-2026-60779High
Vulnerability in Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Affects versions 17.0-26.6. A low-privileged attacker can via HTTP unauthorized create, delete or modify critical data and cause a hang or frequent crashes (complete DoS). CVSS 8.1.
- CVE-2026-60767High
Vulnerability in Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Affects versions 17.0-26.6. A low-privileged attacker can via HTTP take over Siebel Apps - Marketing. CVSS 8.8.
- CVE-2026-60765High
Vulnerability in Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Affects versions 17.0-26.6. Difficult to exploit, but a low-privileged attacker can via HTTP take over Siebel Apps - Marketing. CVSS 7.5.
Original NVD description (English source)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS