CVE-2026-70951

HighCVSS 8.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Vulnerability in Oracle Siebel CRM End User product (component: Document Management). Affects versions 17.0-26.6. Easily exploitable by low-privileged attacker with network access via HTTP, allowing takeover of Siebel CRM End User. CVSS 8.8.

Risk Assessment

An attacker can fully compromise the Siebel CRM End User system, leading to loss of confidentiality, integrity, and availability.

Recommendation

Apply patches provided by Oracle for versions 17.0-26.6. Restrict network access and monitor for suspicious HTTP activity.

Original NVD description (English source)

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in takeover of Siebel CRM End User. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).