CVE-2026-101395: Medium severity Oracle Siebel Apps - Marketing vulnerability
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data as well as unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An unauthenticated attacker with network access to the affected Siebel Apps - Marketing HTTP interface can attempt exploitation. The attack has low complexity, but it requires interaction by someone other than the attacker.
Which deployments are affected?
Oracle Siebel Apps - Marketing versions 17.0 through 26.9 are identified as affected. Exposure depends on whether an attacker can reach the product over HTTP.
What could a successful attack allow?
A successful attack can provide unauthorized read access to a subset of accessible data and unauthorized update, insert, or delete access to some accessible data. The scope change indicates that impacts may significantly affect additional products.