CVE-2026-101456: Medium severity Oracle Siebel CRM Development vulnerability
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Development executes to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Development accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Development accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Organizations using Oracle Siebel CRM Development Configuration Tools in supported affected versions 17.0 through 26.9 are exposed, but exploitation requires access to the infrastructure where Siebel CRM Development executes.
What level of access does an attacker need?
An attacker must already have high privileges and a logon to the relevant infrastructure. No user interaction is required, and the attack vector is local.
What could a successful attack allow?
A successful attack can allow unauthorized creation, deletion, or modification of critical data or all data accessible to Siebel CRM Development. It can also provide unauthorized access to critical data or complete access to all data accessible to the product.