CVE-2026-101476: Medium severity Oracle Siebel Apps - Marketing vulnerability
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Organizations using Oracle Siebel Apps - Marketing versions 17.0 through 26.9 are affected. The vulnerable component is reachable over HTTP, so exposure applies where an unauthenticated attacker can obtain network access to the application.
What does an attacker need to exploit it?
The attacker does not need authentication and exploitation is described as easily achievable over HTTP. However, a person other than the attacker must interact as part of a successful attack.
What is the impact of successful exploitation?
Successful exploitation can allow unauthorized update, insert, or delete operations on some data accessible through Siebel Apps - Marketing. The reported impact is limited to integrity; no confidentiality or availability impact is stated.