CVE-2026-91427: Low severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running affected Oracle Siebel CRM Deployment versions 17.0 through 26.9 are exposed, but exploitation requires a high-privileged attacker who can log on to the infrastructure where the deployment executes.
What access does an attacker need to exploit it?
The attacker needs local access and high privileges on the relevant infrastructure. No user interaction is required.
What is the expected impact if exploitation succeeds?
Successful exploitation can cause a partial denial of service affecting Oracle Siebel CRM Deployment. The provided CVSS vector indicates no confidentiality or integrity impact.
How can I determine whether my environment is affected?
Verify whether Oracle Siebel CRM Deployment Server Infrastructure is deployed and whether its supported version falls between 17.0 and 26.9. Also assess whether high-privileged users can log on to the infrastructure hosting the deployment.