CVE-2026-46921: High severity Oracle Siebel CRM Cloud Applications vulnerability

Published Jun 16, 2026
·
Updated

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components
Oracle Siebel CRM Cloud Applications>=17.0<=26.5
Oracle Siebel CRM>=17.0<=26.5

Event History

Jun 16, 2026
CVE Published
via MITRE·07:27 PM
Data Sourced
via MITRE·07:27 PM
DescriptionSeverity
Jun 17, 2026
Data Sourced
via NVD·10:54 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-46921?

CVE-2026-46921 has a high severity score of 8.8.

2

How do I fix CVE-2026-46921?

To address CVE-2026-46921, ensure that your Oracle Siebel CRM Cloud Applications are updated to a version beyond 26.5.

3

What are the supported versions affected by CVE-2026-46921?

The supported versions affected by CVE-2026-46921 are 17.0 to 26.5.

4

What type of access is required to exploit CVE-2026-46921?

CVE-2026-46921 can be exploited by a low privileged attacker with network access via HTTP.

5

What components of Oracle are affected by CVE-2026-46921?

The vulnerability affects the Siebel CRM Cloud Applications product, specifically the Siebel Cloud Manager component.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203