CVE-2026-62452
CriticalCVSS 9.9Summary
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) versions 22.3-26.6. An unauthenticated attacker can gain unauthorized access to critical data, modify some data, and cause partial denial of service via HTTP. Impact may extend to other products (scope change).
Risk Assessment
High risk of data confidentiality breach, unauthorized modifications, and partial service unavailability, potentially affecting business operations.
Recommendation
Apply Oracle patches for versions 22.3-26.6 and restrict HTTP access to trusted networks.
Original NVD description (English source)
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L).