CVE-2026-101446
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel…
- Risk score
- 67/100
- CVSS
- 9.9 v3.1
- Exploit chance (30 days)
- 0.4%
- Published
- 20 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A critical vulnerability in Oracle Siebel CRM's Siebel Cloud Manager component allows a low-privileged attacker to compromise Siebel CRM Cloud Applications via HTTP, potentially leading to takeover of the application.
- Affected
- {'products': ['Oracle Siebel CRM'], 'packages': [], 'versions': ['17.0-26.9']}
- Fix
- Check the linked advisory for a fix, as none is provided.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.9 critical
References
Original description
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Last activity 20 Oct 2026. Patch Forecast updates every hour.