CVE-2026-60709
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Vulnerability in the Siebel Cloud Manager component (Siebel CRM Cloud Applications) versions 22.3-26.5. Difficult to exploit, requires physical access to the network segment. Unauthenticated attacker can unauthorized update, insert or delete data and read a subset of data.
Risk Assessment
Risk of unauthorized access to CRM data by an attacker with local network access, potentially compromising confidentiality and integrity.
Recommendation
Apply the Oracle patch for Siebel CRM. Restrict physical access to the network where the system runs.
Other vulnerabilities in Siebel CRM Cloud Applications
See all- CVE-2026-91371Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows an unauthenticated network attacker via HTTP to easily exploit it. It may result in unauthorized read access to a subset of data, and attacks may impact additional products (scope change).
- CVE-2026-91370Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows an unauthenticated network attacker via HTTP to easily exploit it. It may result in unauthorized read access to a subset of data.
- CVE-2026-91369Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by a low-privileged attacker with network access via HTTP. It may result in unauthorized creation, deletion, or modification of critical data.
- CVE-2026-91368Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by a high-privileged attacker with logon to the infrastructure. It may result in unauthorized access to critical data or complete access to all data.
- CVE-2026-91367Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows a low-privileged attacker with logon to the infrastructure to easily exploit it. It may result in unauthorized access to critical data or complete access, and attacks may impact additional products (scope change).
- CVE-2026-91366Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment. It may result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, and attacks may impact additional products (scope change).
- CVE-2026-91365Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment. It may result in unauthorized access to critical data or complete access and unauthorized update, insert, or delete access to some data.
- CVE-2026-101445Low
Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user logged into the infrastructure allows unauthorized update, insert, delete, and read access to data.
- CVE-2026-101442Low
Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user with network access via HTTP allows unauthorized read access to a subset of data.
- CVE-2026-62512Critical
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) versions 22.3-26.6. A low-privileged attacker can take over the application via HTTP, with impact potentially extending to other products (scope change).
Original NVD description (English source)
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data as well as unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

