CVE-2026-101393: CSRF
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel Apps - Marketing supported versions 17.0 through 26.9 are affected.
Does an attacker need an account or internal network access?
No. The vulnerability is exploitable by an unauthenticated attacker with network access to the affected component over HTTP.
Is user interaction required for exploitation?
Yes. Exploitation requires interaction by a person other than the attacker.
What could a successful attack allow?
A successful attack can allow unauthorized update, insert, or delete operations on some data accessible to Siebel Apps - Marketing.