A vulnerability in Oracle Siebel Apps – Marketing allows an attacker with low privileges and network access through HTTP to fully compromise the application. Successful exploitation can lead to a complete takeover of the site, resulting in full disclosure of confidential data, destruction or alteration of information, and denial of service to legitimate users.

Oracle’s Siebel Apps – Marketing, versions 17.0 through 26.6, is affected.

The CVSS score of 8.8 indicates high severity with impact to confidentiality, integrity, and availability. The EPSS score is not available, limiting insight into current exploitation probability. The vulnerability is not listed in CISA’s KEV catalog, but its high CVSS and the possibility of low‑privilege network‑based attacks make it a high‑risk issue. Attackers would likely initiate an HTTP request to a weakness in the marketing component from a machine on the same network or with internet reachability to the target server.