CVE-2026-70856

Vulnerability in Siebel CRM Deployment (component Siebel Management Console) affecting versions 17.0-26.9. An easily exploitable attack requiring physical access allows unauthorized read access to a subset of data.

Vulnerability in Oracle Siebel CRM Deployment product (component: Server Infrastructure) affects versions 17.0-25.2. An unauthenticated attacker with network access via TLS can easily compromise the system, causing a hang or frequently repeatable crash (complete DoS).

Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.

Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.

Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A difficult to exploit flaw allows a high privileged attacker with infrastructure logon to perform unauthorized update, insert or delete, read a subset of data, and cause partial denial of service.

Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An easily exploitable flaw allows a high privileged attacker with infrastructure logon to cause partial denial of service.

Vulnerability in the Server Infrastructure component of Siebel CRM Deployment. A difficult-to-exploit attack requires user interaction and can lead to unauthorized access to critical data.

Vulnerability in Oracle Siebel CRM Deployment (component: Siebel Management Console) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify, insert, or delete data. CVSS 3.1 Base Score 7.1.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5.