CVE-2026-91449
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.
Risk Assessment
Potential unauthorized modifications and access to critical CRM data, compromising integrity and confidentiality.
Recommendation
Apply Oracle updates and restrict network access to the Siebel CRM server infrastructure.
Other vulnerabilities in Siebel CRM Deployment
See all- CVE-2026-101449Low
Vulnerability in Siebel CRM Deployment (component Siebel Management Console) affecting versions 17.0-26.9. An easily exploitable attack requiring physical access allows unauthorized read access to a subset of data.
- CVE-2026-21926High
Vulnerability in Oracle Siebel CRM Deployment product (component: Server Infrastructure) affects versions 17.0-25.2. An unauthenticated attacker with network access via TLS can easily compromise the system, causing a hang or frequently repeatable crash (complete DoS).
- CVE-2026-91450High
Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.
- CVE-2026-91436Low
Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A difficult to exploit flaw allows a high privileged attacker with infrastructure logon to perform unauthorized update, insert or delete, read a subset of data, and cause partial denial of service.
- CVE-2026-91427Low
Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An easily exploitable flaw allows a high privileged attacker with infrastructure logon to cause partial denial of service.
- CVE-2026-91414Medium
Vulnerability in the Server Infrastructure component of Siebel CRM Deployment. A difficult-to-exploit attack requires user interaction and can lead to unauthorized access to critical data.
- CVE-2026-83230High
Vulnerability in Oracle Siebel CRM Deployment (component: Siebel Management Console) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify, insert, or delete data. CVSS 3.1 Base Score 7.1.
- CVE-2026-83228High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 7.5.
- CVE-2026-83226High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5.
- CVE-2026-83225High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 7.5.
Original NVD description (English source)
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS