CVE-2026-101402: Low severity Oracle Siebel Apps - Marketing vulnerability
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Affected supported versions are 17.0 through 26.9 of Oracle Siebel Apps - Marketing, specifically the Email Marketing component.
Does exploitation require an account or user interaction?
No. An unauthenticated attacker with network access via HTTP can attempt exploitation, and no user interaction is required; however, exploitation is described as difficult.
What is the expected impact of a successful attack?
A successful attack can allow an attacker to cause a partial denial of service affecting Siebel Apps - Marketing. No confidentiality or integrity impact is identified.