CVE-2026-101405: Medium severity Oracle Siebel Apps - Marketing vulnerability
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data as well as unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Oracle Siebel Apps - Marketing deployments running supported versions 17.0 through 26.9 are affected if they are reachable over HTTPS. The vulnerability is in the Marketing component of Oracle Siebel CRM.
Does exploitation require an authenticated account or user interaction?
No. An unauthenticated attacker with network access via HTTPS can attempt exploitation, and no user interaction is required. Exploitation is rated difficult, reflected by the high attack-complexity metric.
What could a successful attacker do?
A successful attack can provide unauthorized update, insert, or delete access to some accessible Siebel Apps - Marketing data. It can also provide unauthorized read access to a subset of accessible data; availability impact is not indicated.