CVE-2026-101476
MediumCVSS 4.3Summary
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability, but successful attacks require human interaction. This can result in unauthorized update, insert or delete access to some Siebel Apps - Marketing accessible data.
Risk Assessment
An attacker could modify or delete data in the marketing system, potentially affecting data integrity.
Recommendation
Update Oracle Siebel CRM to the latest version and educate users about security awareness.
Other vulnerabilities in Oracle Siebel CRM
See all- CVE-2026-91393Low
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data, but requires user interaction.
- CVE-2026-91392Low
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data without user interaction.
- CVE-2026-91391Low
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to read a subset of data without authorization.
- CVE-2026-91390Medium
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.
- CVE-2026-91389Medium
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.
- CVE-2026-91388Medium
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access, with user interaction, to perform unauthorized modification and read access to some data, potentially impacting additional products.
- CVE-2026-91387Medium
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can perform unauthorized modification and read access to some data.
- CVE-2026-91372Low
Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3-26.9. An easily exploitable flaw allows a low-privileged attacker with local access to read a subset of data without authorization.
- CVE-2026-101468High
Vulnerability in Oracle Siebel CRM Deployment (component: Cloud Gateway). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.
- CVE-2026-101467High
Vulnerability in Oracle Siebel CRM End User (component: Portal Framework). An unauthenticated attacker with network access via HTTPS can create, delete or modify critical data and gain unauthorized access to it.
Original NVD description (English source)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS