CVE-2026-91378
MediumCVSS 6.1Summary
Vulnerability in Oracle Siebel CRM Integration (component: Open Integration) affecting versions 25.12-26.9. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to compromise the product, requires human interaction, and attacks may significantly impact additional products (scope change).
Risk Assessment
Exploitation can result in unauthorized update, insert or delete access and unauthorized read access to a subset of data in Siebel CRM Integration. Given the ease of exploitation and lack of authentication, the risk is significant.
Recommendation
Apply Oracle patches for Siebel CRM Integration, restrict network access to the Open Integration component, and educate users about interacting with suspicious content.
Other vulnerabilities in Siebel CRM Integration
See all- CVE-2026-62592Critical
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Integration. CVSS 9.8.
- CVE-2026-62588Critical
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker with network access via HTTP can take over Siebel CRM Integration, with potential impact on other products (scope change). CVSS 9.9.
- CVE-2026-87339Low
Vulnerability in Oracle Siebel CRM Integration (component: REST) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data, requiring human interaction. CVSS 3.1 Base Score 3.1.
- CVE-2026-101508High
Vulnerability in Siebel CRM Integration (component EAI) affecting versions 17.0-26.9. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or frequently repeatable crash (complete DoS) of Siebel CRM Integration.
- CVE-2026-83326High
Vulnerability in Siebel CRM Integration (Open Integration component) of Oracle Siebel CRM (versions 25.12-26.7). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Integration data. CVSS 7.5 (Confidentiality impact).
- CVE-2026-83227High
Vulnerability in Oracle Siebel CRM Integration (component: EAI) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 7.5.
- CVE-2026-70910High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Affects versions 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to access critical data in Siebel CRM Integration.
- CVE-2026-70859High
Vulnerability in Siebel CRM Integration (component: REST) versions 17.0-26.6. A low-privileged attacker with network access via HTTP can compromise the system, but exploitation is difficult. Successful attacks may result in full takeover of Siebel CRM Integration and may impact additional products (scope change).
- CVE-2026-62596High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker can access critical data and modify some data via HTTP, impacting other products.
- CVE-2026-62595High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with physical access to the network segment can gain full access to critical data and modify it.
Original NVD description (English source)
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel CRM Integration, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Integration accessible data as well as unauthorized read access to a subset of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS