Siebel CRM vulnerabilities

89 known vulnerabilities in Siebel CRM from Oracle. 89 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Siebel CRM Deployment: Missing Authentication for Critical Functionality

  CVE-2026-91450Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to c

• 7.4 High severity

  Siebel CRM Deployment: Missing Authentication for Critical Functionality

  CVE-2026-91449Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to c

• 7.5 High severity

  Siebel CRM Deployment: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-91448Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com

• 7.5 High severity

  Siebel CRM Deployment: Improper Access Control

  CVE-2026-91447Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com

• 8.2 High severity

  Siebel CRM End User: Missing Authentication for Critical Functionality

  CVE-2026-91445Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 8.8 High severity

  Siebel CRM Deployment: Missing Authentication for Critical Functionality

  CVE-2026-91442Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

• 7.1 High severity

  Siebel CRM Deployment: Improper Access Control

  CVE-2026-91438Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

• 8.7 High severity

  Siebel CRM Deployment: Improper Access Control

  CVE-2026-91437Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to com

• 7.2 High severity

  Siebel Apps - Field Service: Missing Authentication for Critical Functionality

  CVE-2026-91433Oct 20, 2026Oracle

  Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compro

• 7.5 High severity

  Siebel CRM Integration: Uncontrolled Resource Consumption

  CVE-2026-101508Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CR

• 8.8 High severity

  Siebel CRM Development: Cross-Site Request Forgery

  CVE-2026-101495Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 7.5 High severity

  Siebel CRM Deployment: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101468Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise

• 7.4 High severity

  Siebel CRM End User: Improper Access Control

  CVE-2026-101467Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to comprom

• 7.1 High severity

  Siebel CRM Deployment: Improper Access Control

  CVE-2026-101464Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure whe

• 7.5 High severity

  Siebel CRM End User: Improper Access Control

  CVE-2026-101463Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sieb

• 7.5 High severity

  Siebel CRM Deployment: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101461Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com

• 7.5 High severity

  Siebel CRM Deployment: Improper Access Control

  CVE-2026-101460Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to comp

• 8.3 High severity

  Siebel CRM Deployment: Uncontrolled Resource Consumption

  CVE-2026-101459Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

• 8.2 High severity

  Siebel CRM Deployment: Improper Access Control

  CVE-2026-101458Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com

• 8.8 High severity

  Siebel Apps - Life Sciences: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-101457Oct 20, 2026Oracle

  Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise

• 8.7 High severity

  Siebel Life Sciences: Improper Access Control

  CVE-2026-101451Oct 20, 2026Oracle

  Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Li

• 9.9 Critical severity

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component…

  CVE-2026-101446Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.0 High severity

  Siebel CRM Cloud Applications: Missing Authentication for Critical Functionality

  CVE-2026-101438Oct 20, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physica

• 7.5 High severity

  Siebel CRM Deployment: Uncontrolled Resource Consumption

  CVE-2026-83228Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to comp

• 7.5 High severity

  Siebel CRM Deployment: Uncontrolled Resource Consumption

  CVE-2026-83225Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to comp

• 7.5 High severity

  Siebel CRM Deployment: Uncontrolled Resource Consumption

  CVE-2026-83222Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple pr

• 9.1 Critical severity

  Siebel CRM Deployment: Improper Authentication

  CVE-2026-83202Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com

• 9.1 Critical severity

  Siebel CRM Deployment: Improper Authentication

  CVE-2026-83201Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com

• 7.5 High severity

  Siebel CRM Deployment: Uncontrolled Resource Consumption

  CVE-2026-83183Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com

• 9.1 Critical severity

  Siebel CRM End User: Improper Authentication

  CVE-2026-83154Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Siebel C

• 8.2 High severity

  Siebel CRM Cloud Applications: Improper Access Control

  CVE-2026-83085Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with access to the physical c

• 8.2 High severity

  Siebel CRM Cloud Applications: Improper Access Control

  CVE-2026-83078Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 7.5 High severity

  Siebel CRM Cloud Applications: Improper Access Control

  CVE-2026-83075Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 8.6 High severity

  Siebel CRM Cloud Applications: Improper Access Control

  CVE-2026-83074Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSH

• 7.8 High severity

  Siebel CRM Deployment: Improper Access Control

  CVE-2026-82992Sep 15, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel

• 8.8 High severity

  Siebel CRM End User: Improper Access Control

  CVE-2026-70951Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi

• 8.8 High severity

  Siebel CRM Deployment: Improper Access Control

  CVE-2026-70949Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

• 7.5 High severity

  Siebel CRM Integration: Improper Access Control

  CVE-2026-70910Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel C

• 8.5 High severity

  Siebel CRM Integration: Improper Access Control

  CVE-2026-70859Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel

• 7.7 High severity

  Siebel CRM End User: Improper Access Control

  CVE-2026-70857Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Siebel