CVE-2026-62587
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Vulnerability in Oracle Siebel CRM Administration (component: Data Archival). Affected versions are 25.12-26.6. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Siebel CRM Administration. Successful attacks can result in unauthorized access to critical data or complete access to all Siebel CRM Administration accessible data, as well as unauthorized update, insert, or delete access to some data.
Risk Assessment
Risk of confidentiality and integrity breach, including unauthorized access to critical data and potential modification or deletion of some data.
Recommendation
Apply Oracle patches for versions 25.12-26.6. Restrict HTTP access to trusted users and monitor activity.
Original NVD description (English source)
Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Administration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Administration accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Administration accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).