CVE-2026-91430: Medium severity Oracle Siebel Apps - Financial Services vulnerability
Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Financial Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Apps - Financial Services accessible data as well as unauthorized update, insert or delete access to some of Siebel Apps - Financial Services accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel Apps - Financial Services deployments using supported versions 17.0 through 26.9 are affected, specifically the Financial Accounts component.
Does an attacker need credentials or user interaction?
No. The vulnerability can be exploited by an unauthenticated attacker with network access via HTTP, and it does not require user interaction. Exploitation is rated difficult, reflecting the high attack complexity.
What is the potential impact of successful exploitation?
A successful attack can expose critical data or all data accessible through Siebel Apps - Financial Services. It can also allow unauthorized update, insert, or delete operations on some accessible data.