CVE-2026-101508: High severity Oracle Siebel CRM Integration vulnerability
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Integration. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel CRM Integration deployments using the EAI component on supported versions 17.0 through 26.9 are affected.
Does exploitation require authentication or user interaction?
No. An unauthenticated attacker can exploit the issue over HTTP with network access; no user interaction is required.
What is the practical impact of successful exploitation?
Successful exploitation can cause Siebel CRM Integration to hang or crash repeatedly, resulting in a complete denial of service. The provided CVSS vector indicates no confidentiality or integrity impact.