CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-91439
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can gain unauthorized access to critical data or all accessible data.

CVE-2026-91438
High

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized update, insert or delete access to some data.

CVE-2026-91437
High

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A high-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized creation, deletion or modification of data; attacks may also significantly impact additional products (scope change).

CVE-2026-91436
Low

Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A difficult to exploit flaw allows a high privileged attacker with infrastructure logon to perform unauthorized update, insert or delete, read a subset of data, and cause partial denial of service.

CVE-2026-91435
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment.

CVE-2026-91434
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.

CVE-2026-91433
High

Vulnerability in Oracle Siebel Apps - Field Service (component: Smart Answer) affecting versions 17.0-26.9. A high-privileged attacker with network access via HTTP can take over Siebel Apps - Field Service.

CVE-2026-91432
Medium

Vulnerability in Oracle Siebel CRM End User (component: Open UI). An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert or delete access and unauthorized read access to a subset of data.

CVE-2026-91431
Medium

Vulnerability in the Siebel CRM End User product (Open UI component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or all accessible data.

CVE-2026-91430
Medium

Vulnerability in the Siebel Apps - Financial Services product (Financial Accounts component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical data and to update, insert or delete some accessible data.

CVE-2026-91429
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical data and to update, insert or delete some accessible data.

CVE-2026-91428
Medium

Vulnerability in the Siebel CRM End User product (Open UI component) of Oracle Siebel CRM. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to perform unauthorized update, insert or delete of data, requiring user interaction.

CVE-2026-91427
Low

Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An easily exploitable flaw allows a high privileged attacker with infrastructure logon to cause partial denial of service.

CVE-2026-91426
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or all accessible data.

CVE-2026-91424
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to cause a hang or repeatable crash (DoS) as well as unauthorized modification and read access to some data.

CVE-2026-91423
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to perform unauthorized creation, deletion or modification of critical data and unauthorized access to all accessible data.

CVE-2026-91422
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to perform unauthorized creation, deletion or modification of critical data.

CVE-2026-91421
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to cause a hang or repeatable crash (DoS) of the system.

CVE-2026-91420
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged network attacker via HTTP to perform unauthorized creation, deletion or modification of critical data.

CVE-2026-91419
High

Vulnerability in Oracle HTTP Server (component: OSSL Module) affecting version 12.2.1.4.0. A low-privileged attacker with logon access to the infrastructure where Oracle HTTP Server executes can take over the server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS