Description
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-08-18
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in Oracle Siebel Apps – Marketing permits a low‑privileged attacker with network connectivity via HTTP to exploit the system. Successful exploitation allows the attacker to gain full control of the marketing component, compromising confidentiality, integrity, and availability of the application.

Affected Systems

Oracle Siebel Apps – Marketing versions 17.0 through 26.6 are vulnerable. The issue resides in the Marketing component of the Siebel CRM product.

Risk and Exploitability

The CVSS v3.1 base score of 8.8 demonstrates high severity, while the EPSS score of less than 1 % indicates a very low probability of exploitation. The vulnerability is not catalogued in CISA’s KEV list. The attack vector is a low‑privileged attacker with network access via HTTP and does not require user interaction.

Generated by OpenCVE AI on August 21, 2026 at 17:10 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor‑supplied patch for Siebel Apps – Marketing as detailed in Oracle’s security alert.
  • Restrict HTTP access to the marketing component by limiting connections to trusted IP ranges or proxying through a VPN.
  • Monitor application logs for anomalous authentication attempts and reset credentials for accounts with elevated privileges.

Generated by OpenCVE AI on August 21, 2026 at 17:10 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 21 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
Title Siebel Apps – Marketing HTTP Exploit Leading to Full Application Takeover

Fri, 21 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Tue, 18 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
Description Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
First Time appeared Oracle
Oracle siebel Apps - Marketing
CPEs cpe:2.3:a:oracle:siebel_apps_-_marketing:*:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle siebel Apps - Marketing
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Oracle Siebel Apps - Marketing
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-08-20T17:08:31.270Z

Reserved: 2026-07-08T15:51:55.589Z

Link: CVE-2026-60767

cve-icon Vulnrichment

Updated: 2026-08-20T16:46:43.754Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-18T21:16:42.753

Modified: 2026-08-26T15:17:26.517

Link: CVE-2026-60767

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T17:15:05Z

Weaknesses