CVE-2026-60758
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Vulnerability in Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI). Affects versions 25.12-26.6. Easily exploitable, allows low privileged attacker via HTTP to gain unauthorized access to critical data and modify some data. Attack may impact other products (scope change).
Risk Assessment
Risk of compromise of confidentiality of critical data and integrity of some data in Siebel AI, with potential impact on other products.
Recommendation
Apply Oracle patches. Monitor HTTP traffic and restrict user privileges.
Original NVD description (English source)
Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Artificial Intelligence. While the vulnerability is in Siebel Artificial Intelligence, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Artificial Intelligence accessible data as well as unauthorized update, insert or delete access to some of Siebel Artificial Intelligence accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).