CVE-2026-60808
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Vulnerability in Siebel Apps - Marketing (component: Email Marketing). Affects versions 17.0-26.6. Difficult to exploit, requires local access and low privileges. Attack may impact additional products (scope change).
Risk Assessment
An attacker with local access can gain unauthorized access to data and modify it, and may affect other products, increasing the scope of compromise.
Recommendation
Apply Oracle patches for versions 17.0-26.6. Restrict local access to systems running Siebel Apps - Marketing.
Original NVD description (English source)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. While the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Marketing accessible data as well as unauthorized access to critical data or complete access to all Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).