CVE-2026-60690
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affects versions 22.3-26.5. A low-privileged attacker with network access via HTTP can compromise data confidentiality, and attacks may impact additional products (scope change).
Risk Assessment
An attacker may gain unauthorized access to critical CRM data, potentially leading to breach of customer information confidentiality and affecting other systems.
Recommendation
Apply the latest Oracle security patches for Siebel CRM Cloud Applications. Restrict network access to the system to trusted users only.
Other vulnerabilities in Siebel CRM Cloud Applications
See all- CVE-2026-91371Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows an unauthenticated network attacker via HTTP to easily exploit it. It may result in unauthorized read access to a subset of data, and attacks may impact additional products (scope change).
- CVE-2026-91370Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows an unauthenticated network attacker via HTTP to easily exploit it. It may result in unauthorized read access to a subset of data.
- CVE-2026-91369Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by a low-privileged attacker with network access via HTTP. It may result in unauthorized creation, deletion, or modification of critical data.
- CVE-2026-91368Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by a high-privileged attacker with logon to the infrastructure. It may result in unauthorized access to critical data or complete access to all data.
- CVE-2026-91367Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows a low-privileged attacker with logon to the infrastructure to easily exploit it. It may result in unauthorized access to critical data or complete access, and attacks may impact additional products (scope change).
- CVE-2026-91366Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment. It may result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, and attacks may impact additional products (scope change).
- CVE-2026-91365Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment. It may result in unauthorized access to critical data or complete access and unauthorized update, insert, or delete access to some data.
- CVE-2026-101445Low
Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user logged into the infrastructure allows unauthorized update, insert, delete, and read access to data.
- CVE-2026-101442Low
Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user with network access via HTTP allows unauthorized read access to a subset of data.
- CVE-2026-62512Critical
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) versions 22.3-26.6. A low-privileged attacker can take over the application via HTTP, with impact potentially extending to other products (scope change).
Original NVD description (English source)
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

