CVE-2026-70949

HighCVSS 8.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

32th percentile - higher than 32% of all known CVEs

Summary

Vulnerability in Oracle Siebel CRM Deployment product (component: Server Infrastructure). Affects versions 17.0-26.6. Easily exploitable by low-privileged attacker via HTTP, allowing takeover. CVSS 8.8.

Risk Assessment

An attacker can take over the Siebel CRM Deployment, compromising data confidentiality, integrity, and availability.

Recommendation

Apply Oracle patches for versions 17.0-26.6. Restrict network access and monitor HTTP traffic.

Original NVD description (English source)

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).