CVE-2026-87339
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Vulnerability in Oracle Siebel CRM Integration (component: REST) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data, requiring human interaction. CVSS 3.1 Base Score 3.1.
Risk Assessment
The risk affects CRM integration data confidentiality — an attacker could read some information, potentially compromising customer data privacy. Human interaction is required, limiting the vector.
Recommendation
Apply Oracle updates for Siebel CRM 17.0-26.9 and educate users on secure interactions with REST interfaces.
Other vulnerabilities in Siebel CRM Integration
See all- CVE-2026-91378Medium
Vulnerability in Oracle Siebel CRM Integration (component: Open Integration) affecting versions 25.12-26.9. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to compromise the product, requires human interaction, and attacks may significantly impact additional products (scope change).
- CVE-2026-62592Critical
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Integration. CVSS 9.8.
- CVE-2026-62588Critical
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker with network access via HTTP can take over Siebel CRM Integration, with potential impact on other products (scope change). CVSS 9.9.
- CVE-2026-101508High
Vulnerability in Siebel CRM Integration (component EAI) affecting versions 17.0-26.9. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or frequently repeatable crash (complete DoS) of Siebel CRM Integration.
- CVE-2026-83326High
Vulnerability in Siebel CRM Integration (Open Integration component) of Oracle Siebel CRM (versions 25.12-26.7). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Integration data. CVSS 7.5 (Confidentiality impact).
- CVE-2026-83227High
Vulnerability in Oracle Siebel CRM Integration (component: EAI) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 7.5.
- CVE-2026-70910High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Affects versions 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to access critical data in Siebel CRM Integration.
- CVE-2026-70859High
Vulnerability in Siebel CRM Integration (component: REST) versions 17.0-26.6. A low-privileged attacker with network access via HTTP can compromise the system, but exploitation is difficult. Successful attacks may result in full takeover of Siebel CRM Integration and may impact additional products (scope change).
- CVE-2026-62596High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker can access critical data and modify some data via HTTP, impacting other products.
- CVE-2026-62595High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with physical access to the network segment can gain full access to critical data and modify it.
Original NVD description (English source)
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS