CVE-2026-101394: Medium severity Oracle Siebel Apps - Marketing vulnerability
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An unauthenticated attacker with network access to the affected Marketing component over HTTP can exploit it. No privileges or user interaction are required.
What is the potential impact of a successful attack?
A successful attack can allow unauthorized update, insert, or delete operations on some data accessible through Siebel Apps - Marketing. The stated impact is limited to integrity; no confidentiality or availability impact is identified.
Which deployments are known to be affected?
Affected supported versions are 17.0 through 26.9 of Oracle Siebel Apps - Marketing. The vulnerability applies to the Marketing component.