CVE-2026-91371: Infoleak
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker with network access over HTTP can exploit it. No privileges or user interaction are required.
Which deployments are affected?
Affected supported versions are 22.3 through 26.9 of Oracle Siebel CRM Cloud Applications, specifically the Siebel Cloud Manager component.
What is the expected impact if exploitation succeeds?
Successful exploitation can allow unauthorized read access to a subset of accessible Siebel CRM Cloud Applications data. The scope may extend to significantly impact additional products.