CVE-2026-91445
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Vulnerability in Oracle Siebel CRM End User (component: Communications Panel/Dashboard) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized update, insert or delete access to some data.
Risk Assessment
High risk to data confidentiality and integrity — the attack requires no authentication or user interaction. Organizations running Siebel CRM End User are exposed to data leakage and modification.
Recommendation
Apply the Oracle security update for Siebel CRM End User as soon as possible. Until patched, restrict network access to the Communications Panel/Dashboard component.
Other vulnerabilities in Oracle Siebel CRM End User
See all- CVE-2026-83154Critical
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. An unauthenticated attacker with network access via SOAP can modify or delete data and gain access to all data accessible in the system.
- CVE-2026-83217High
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data accessible in Siebel CRM End User.
- CVE-2026-83213High
Vulnerability in Oracle Siebel CRM End User (component: Reports) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all data accessible in Siebel CRM End User.
Original NVD description (English source)
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM End User accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM End User accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS