CVE-2026-60709: Medium severity Oracle Siebel CRM Cloud Applications vulnerability
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data as well as unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60709?
The severity of CVE-2026-60709 is rated as medium with a CVSS score of 4.2.
What types of applications are affected by CVE-2026-60709?
CVE-2026-60709 affects the Oracle Siebel CRM Cloud Applications, specifically related to the Siebel Cloud Manager component.
How does CVE-2026-60709 impact Oracle Siebel CRM?
CVE-2026-60709 allows an unauthenticated attacker with access to the physical communication segment to potentially exploit the vulnerability.
Which versions of Oracle Siebel CRM are vulnerable to CVE-2026-60709?
Supported versions affected by CVE-2026-60709 range from 22.3 to 26.5.
What mitigation measures should be taken for CVE-2026-60709?
To mitigate CVE-2026-60709, it is recommended to apply relevant security updates provided by Oracle for the affected Siebel CRM versions.