CVE-2026-60751: High severity Oracle Siebel Apps - Marketing vulnerability

Q: Which deployments are affected and reachable by an attacker?

Oracle Siebel Apps - Marketing versions 17.0 through 26.6 are identified as affected. Exposure requires network access to the product over HTTP.

Q: What access does an attacker need to exploit this issue?

An attacker needs a low-privileged account and network access via HTTP. No user interaction is required, and the vulnerability is rated low complexity to exploit.

Q: What is the likely impact if exploitation succeeds?

Successful exploitation can result in takeover of Siebel Apps - Marketing, with high impacts to confidentiality, integrity, and availability.

Published Aug 18, 2026

Updated

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

1 affected component

Oracle Siebel Apps - Marketing>=17.0<=26.6

Event History

Aug 18, 2026

CVE Published

via NVD·09:16 PM

Data Sourced

via NVD·09:16 PM

DescriptionSeverity

Frequently Asked Questions

Which deployments are affected and reachable by an attacker?

Oracle Siebel Apps - Marketing versions 17.0 through 26.6 are identified as affected. Exposure requires network access to the product over HTTP.

What access does an attacker need to exploit this issue?

An attacker needs a low-privileged account and network access via HTTP. No user interaction is required, and the vulnerability is rated low complexity to exploit.

What is the likely impact if exploitation succeeds?