CVE-2026-87339: Infoleak
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel CRM Integration REST deployments on supported versions 17.0 through 26.9 are affected.
What must an attacker do to exploit this issue?
The attacker must have network access to the target over HTTP and does not need authentication. Exploitation is difficult and requires interaction by a person other than the attacker.
What is the potential impact of successful exploitation?
A successful attack can provide unauthorized read access to a subset of data accessible through Siebel CRM Integration. The issue does not have stated integrity or availability impact.