CVE-2026-91433: High severity Oracle Siebel Apps - Field Service vulnerability
Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Field Service. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Field Service. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel Apps - Field Service deployments using the Smart Answer component are affected in supported versions 17.0 through 26.9.
What level of access does an attacker need?
An attacker needs high privileges and network access to the affected service over HTTP. No user interaction is required.
What is the potential impact of successful exploitation?
Successful exploitation can result in takeover of Siebel Apps - Field Service, with high confidentiality, integrity, and availability impact.