CVE-2026-62585
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Vulnerability in Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Administration. CVSS 9.8.
Risk Assessment
The risk is full takeover of Siebel CRM Administration, leading to complete loss of confidentiality, integrity, and availability of administrative CRM data.
Recommendation
Apply Oracle patches for versions 25.12-26.6. Restrict access to HTTP services of Siebel CRM Administration.
Other vulnerabilities in Siebel CRM Administration
See all- CVE-2026-62587High
Vulnerability in Oracle Siebel CRM Administration (component: Data Archival). Affected versions are 25.12-26.6. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Siebel CRM Administration. Successful attacks can result in unauthorized access to critical data or complete access to all Siebel CRM Administration accessible data, as well as unauthorized update, insert, or delete access to some data.
- CVE-2026-62586High
Vulnerability in Oracle Siebel CRM Administration (component: Data Archival). Affected versions are 25.12-26.6. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Siebel CRM Administration. Successful attacks can result in unauthorized access to critical data or complete access to all Siebel CRM Administration accessible data, with scope change.
Original NVD description (English source)
Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Administration. Successful attacks of this vulnerability can result in takeover of Siebel CRM Administration. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS