Patch Forecast
Amber warning
Patch this week.

CVE-2026-101495

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel…

Risk score
65/100
CVSS
8.8 v3.1
Exploit chance (30 days)
0.4%
Published
20 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks requi…
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Amber

  • CVSS 8.8 high
  • Remotely exploitable without logging in

References

Original description

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

Last activity 20 Oct 2026. Patch Forecast updates every hour.