CVE-2026-101397: Infoleak
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel Apps - Marketing deployments running supported versions 17.0 through 26.9 are affected.
What access does an attacker need?
Exploitation requires a high-privileged attacker with network access to the Marketing component over HTTP. The attack is rated difficult to exploit and does not require user interaction.
What is the expected impact if exploitation succeeds?
A successful attack can provide unauthorized read access to a subset of data accessible through Siebel Apps - Marketing. The stated impact is limited to confidentiality; integrity and availability are not affected.