CVE-2026-91436
LowCVSS 3.9Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A difficult to exploit flaw allows a high privileged attacker with infrastructure logon to perform unauthorized update, insert or delete, read a subset of data, and cause partial denial of service.
Risk Assessment
Requires high privileges and local access, but may compromise integrity and confidentiality of CRM data and cause partial service unavailability.
Recommendation
Apply Oracle updates for Siebel CRM Deployment 17.0-26.9 and restrict server infrastructure access to trusted administrators.
Other vulnerabilities in Siebel CRM Deployment
See all- CVE-2026-101449Low
Vulnerability in Siebel CRM Deployment (component Siebel Management Console) affecting versions 17.0-26.9. An easily exploitable attack requiring physical access allows unauthorized read access to a subset of data.
- CVE-2026-21926High
Vulnerability in Oracle Siebel CRM Deployment product (component: Server Infrastructure) affects versions 17.0-25.2. An unauthenticated attacker with network access via TLS can easily compromise the system, causing a hang or frequently repeatable crash (complete DoS).
- CVE-2026-91450High
Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.
- CVE-2026-91449High
Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.
- CVE-2026-91427Low
Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An easily exploitable flaw allows a high privileged attacker with infrastructure logon to cause partial denial of service.
- CVE-2026-91414Medium
Vulnerability in the Server Infrastructure component of Siebel CRM Deployment. A difficult-to-exploit attack requires user interaction and can lead to unauthorized access to critical data.
- CVE-2026-83230High
Vulnerability in Oracle Siebel CRM Deployment (component: Siebel Management Console) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify, insert, or delete data. CVSS 3.1 Base Score 7.1.
- CVE-2026-83228High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 7.5.
- CVE-2026-83226High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5.
- CVE-2026-83225High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 7.5.
Original NVD description (English source)
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Deployment accessible data as well as unauthorized read access to a subset of Siebel CRM Deployment accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 3.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS