CVE-2026-60753
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Vulnerability in Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Affects versions 17.0-26.6. Easily exploitable, allows low privileged attacker with logon to the infrastructure to take over Siebel CRM Deployment.
Risk Assessment
Risk of complete takeover of Siebel CRM Deployment, potentially leading to compromise of confidentiality, integrity and availability.
Recommendation
Apply Oracle patches. Restrict local access to infrastructure and monitor logons.
Original NVD description (English source)
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

