CVE-2026-60705
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) allows an unauthenticated attacker over HTTP to gain unauthorized access to critical data, modify it, and cause partial denial of service. Exploitation is difficult.
Risk Assessment
An attacker can gain full access to sensitive data, modify it, and cause partial service unavailability.
Recommendation
Update Siebel CRM Cloud Applications to the latest version. Implement additional authentication mechanisms and restrict network access.
Other vulnerabilities in Siebel CRM Cloud Applications
See all- CVE-2026-91371Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows an unauthenticated network attacker via HTTP to easily exploit it. It may result in unauthorized read access to a subset of data, and attacks may impact additional products (scope change).
- CVE-2026-91370Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows an unauthenticated network attacker via HTTP to easily exploit it. It may result in unauthorized read access to a subset of data.
- CVE-2026-91369Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by a low-privileged attacker with network access via HTTP. It may result in unauthorized creation, deletion, or modification of critical data.
- CVE-2026-91368Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by a high-privileged attacker with logon to the infrastructure. It may result in unauthorized access to critical data or complete access to all data.
- CVE-2026-91367Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows a low-privileged attacker with logon to the infrastructure to easily exploit it. It may result in unauthorized access to critical data or complete access, and attacks may impact additional products (scope change).
- CVE-2026-91366Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment. It may result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, and attacks may impact additional products (scope change).
- CVE-2026-91365Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment. It may result in unauthorized access to critical data or complete access and unauthorized update, insert, or delete access to some data.
- CVE-2026-101445Low
Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user logged into the infrastructure allows unauthorized update, insert, delete, and read access to data.
- CVE-2026-101442Low
Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user with network access via HTTP allows unauthorized read access to a subset of data.
- CVE-2026-62512Critical
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) versions 22.3-26.6. A low-privileged attacker can take over the application via HTTP, with impact potentially extending to other products (scope change).
Original NVD description (English source)
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

