This vulnerability in Oracle Siebel Apps - Marketing allows an attacker with network access over HTTP to modify, insert, or delete data without authentication. The flaw operates through the Marketing component and can be exploited easily, which results in integrity violations without affecting confidentiality or availability. The CVSS 3.1 score of 5.3 reflects an impact limited to integrity, with low attack complexity and no privilege or user interaction required.

Affected versions are Oracle Siebel Apps - Marketing 17.0 through 26.9 inclusive. The product is part of the Oracle Siebel CRM suite and is deployed by organizations using marketing automation and data management features within Siebel.

The vulnerability carries moderate severity; its EPSS score is not available, and it is not listed in the CISA KEV catalog. However, the lack of authentication requirements and the requirement of only network access over HTTP suggest that an attacker with direct or compromised network connectivity could exploit this flaw swiftly. A successful attack allow unauthorized, uncontrolled changes to marketing data, potentially undermining business processes and regulatory compliance.