CVE-2026-101406 Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)

Description

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Exploitable remotely over the network, without an account and without any user action; the impact on data or service is limited.

Attack vector

Network

Attack complexity

High

Privileges required

None

Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected products and versions