Vulnerability in Siebel Artificial Intelligence permits a low‑privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized update, insert or delete operations. Because the vulnerability can cross product boundaries, exploitation could also affect other components of the Oracle Siebel CRM suite. The CVSS vector indicates confidentiality compromise at high severity (C:H) and integrity compromise at low severity (I:L).

The affected product is Oracle Siebel Artificial Intelligence, part of the Oracle Siebel CRM platform, for versions 25.12 through 26.6. No other products or versions are listed as affected.

The CVSS base score of 8.5 classifies the issue as high severity. The attack vector is network‑based (AV:N) and an attacker needs only low privileges, making the vulnerability easily exploitable if an adversary can reach the Siebel AI web interface. EPSS indicates a very low exploitation probability (< 1 %). The vulnerability is not listed in the CISA KEV catalog, but the potential impact remains significant. Organizations that host the affected versions should consider this a high‑risk threat, especially if the AI component is exposed to the internet or an untrusted network.