CVE-2026-101525
HighCVSS 8.8Summary
Vulnerability in Oracle Enterprise Manager for Siebel (component Configuration Management) affecting versions 13.5 and 24.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Siebel.
Risk Assessment
A low-privileged network attacker can take over the system, impacting confidentiality, integrity, and availability. The high CVSS score of 8.8 indicates critical risk.
Recommendation
Promptly apply Oracle security updates for versions 13.5 and 24.1 and consider restricting network access to the HTTP interface.
Other vulnerabilities in Oracle Enterprise Manager for Siebel
Original NVD description (English source)
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Siebel. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager for Siebel. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS