CVE-2026-101454: Medium severity Oracle Siebel CRM Development vulnerability
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Development executes to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Development accessible data as well as unauthorized read access to a subset of Siebel CRM Development accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel CRM Development installations using the Configuration Tools component are affected in supported versions 17.0 through 26.9.
What access does an attacker need to exploit this issue?
An attacker needs a low-privileged account and the ability to log on to the infrastructure where Siebel CRM Development executes. Exploitation is local and does not require user interaction.
What could successful exploitation allow?
A successful attack can allow unauthorized creation, deletion, or modification of critical data or all data accessible to Siebel CRM Development. It can also allow unauthorized reading of a subset of accessible data.