CVE-2026-101396: Medium severity Oracle Siebel Apps - Marketing vulnerability
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Organizations running supported Oracle Siebel Apps - Marketing versions 17.0 through 26.9 are affected. Exploitation requires a low-privileged attacker to have a logon to the infrastructure where the Marketing component executes.
What could an attacker do if exploitation succeeds?
A successful attack can allow unauthorized creation, deletion, or modification of critical data or any data accessible to Siebel Apps - Marketing. The documented impact is integrity only; no confidentiality or availability impact is specified.
Does exploitation require user interaction or remote network access?
No user interaction is required. The attack vector is local, and the attacker must already have low-privileged access to the infrastructure running the affected component.