CVE-2026-101406: Low severity Oracle Siebel Apps - Marketing vulnerability
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel Apps - Marketing supported versions 17.0 through 26.9 are affected.
Does exploitation require authentication or user interaction?
No. An unauthenticated attacker with network access over HTTP can attempt exploitation, and no user interaction is required.
What is the likely impact of a successful attack?
A successful attack can provide unauthorized read access to a subset of data accessible through Siebel Apps - Marketing. The stated impact is limited to confidentiality; integrity and availability impacts are not listed.
How difficult is exploitation?
The vulnerability is rated high attack complexity, meaning exploitation is described as difficult despite being reachable remotely over HTTP.