CVE-2026-46885: High severity Oracle Siebel CRM Integration vulnerability

Q: Who can exploit this vulnerability?

An attacker needs network access to the affected Siebel CRM Integration HTTP interface and valid low-privileged credentials. No user interaction is required.

Q: Which deployments are affected?

The affected component is EAI in Oracle Siebel CRM Integration. Supported affected versions are 17.0 through 26.5.

Q: What is the potential impact of successful exploitation?

Successful exploitation can allow takeover of Siebel CRM Integration, with high impact to confidentiality, integrity, and availability.

Published Jun 16, 2026

Updated

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components

Oracle Siebel CRM Integration>=17.0<=26.5

Oracle Siebel CRM>=17.0<=26.5

Event History

Jun 16, 2026

CVE Published

via MITRE·07:27 PM

Data Sourced

via MITRE·07:27 PM

DescriptionSeverity

Jun 17, 2026

Data Sourced

via NVD·10:54 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker needs network access to the affected Siebel CRM Integration HTTP interface and valid low-privileged credentials. No user interaction is required.

Which deployments are affected?

The affected component is EAI in Oracle Siebel CRM Integration. Supported affected versions are 17.0 through 26.5.

What is the potential impact of successful exploitation?