Vulnerability in Oracle Siebel Apps – Marketing allows a low‑privileged attacker who has logged into the infrastructure where the application runs to compromise the system. The flaw enables the attacker to create, delete or modify data and gain full access to all data accessible through Siebel Apps – Marketing, leading to significant confidentiality and integrity breaches.

Affected systems include Oracle Corporation’s Siebel Apps – Marketing (Email Marketing component). The vulnerability applies to versions 17.0 through 26.6. While the issue is confined to this product, successful exploitation can extend the impact to other Siebel CRM components due to scope changes.

With a CVSS base score of 7.5 the flaw is considered high severity, yet the EPSS value is not available and the vulnerability is not listed in the CISA KEV catalog. The required condition is a low‑privileged local account on the target infrastructure, making the exploit feasible for insider threat or compromised credentials. The risk is therefore moderate to high, particularly in environments where users have broad local privileges.