The vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing allows an attacker who can reach the system over SMTP to cause a partial denial of service. The attacker does not need prior authentication. The flaw affects versions 17.0 through 26.9. A successful exploit can interrupt service availability for the Marketing component, impacting business operations.

This flaw impacts the Siebel Apps - Marketing product from Oracle, specifically versions 17.0 up through 26.9. Systems running these releases are susceptible unless patched or otherwise protected. The affected code resides in the Marketing component of the Siebel CRM suite.

The CVSS v3.1 score of 5.3 indicates a moderate risk level with limited impact to confidentiality and integrity but noticeable availability impact. Because the vector is Network and requires no privileges, the exploitation risk is considered moderate. No exploit probability score is currently available and the vulnerability is not listed in the CISA KEV catalog, suggesting it may not be actively exploited. Still, the unauthenticated nature of the attack and the service disruption potential warrant monitoring and timely remediation.