CVE-2026-60712
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A vulnerability in Siebel CRM Cloud Applications allows a low-privileged attacker with local access to gain complete access to all application data, with impact on other products.
Risk Assessment
An attacker could read all CRM data, including sensitive customer information, leading to a data breach.
Recommendation
Apply the Oracle patch and restrict local access to Siebel CRM servers.
Other vulnerabilities in Siebel CRM Cloud Applications
See all- CVE-2026-91371Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows an unauthenticated network attacker via HTTP to easily exploit it. It may result in unauthorized read access to a subset of data, and attacks may impact additional products (scope change).
- CVE-2026-91370Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows an unauthenticated network attacker via HTTP to easily exploit it. It may result in unauthorized read access to a subset of data.
- CVE-2026-91369Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by a low-privileged attacker with network access via HTTP. It may result in unauthorized creation, deletion, or modification of critical data.
- CVE-2026-91368Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by a high-privileged attacker with logon to the infrastructure. It may result in unauthorized access to critical data or complete access to all data.
- CVE-2026-91367Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 allows a low-privileged attacker with logon to the infrastructure to easily exploit it. It may result in unauthorized access to critical data or complete access, and attacks may impact additional products (scope change).
- CVE-2026-91366Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment. It may result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, and attacks may impact additional products (scope change).
- CVE-2026-91365Medium
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.9 requires a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment. It may result in unauthorized access to critical data or complete access and unauthorized update, insert, or delete access to some data.
- CVE-2026-101445Low
Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user logged into the infrastructure allows unauthorized update, insert, delete, and read access to data.
- CVE-2026-101442Low
Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user with network access via HTTP allows unauthorized read access to a subset of data.
- CVE-2026-62512Critical
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) versions 22.3-26.6. A low-privileged attacker can take over the application via HTTP, with impact potentially extending to other products (scope change).
Original NVD description (English source)
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

