This vulnerability targets the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications. An attacker who already has high privileged access to the infrastructure where the application runs can exploit the flaw to compromise the application. Successful exploitation would allow the attacker to read critical data or gain complete access to all data held by the application. The CVSS score of 4.1 reflects a moderate severity primarily on confidentiality.

Oracle Siebel CRM Cloud Applications versions 22.3 through 26.9 are affected, as indicated by the advisory.

The likely attack vector is local, because the description indicates that an attacker must have high privileged access and be able to log on to the same infrastructure where Siebel CRM Cloud Applications runs. The CVSS score of 4.1 indicates a moderate severity, primarily affecting confidentiality. The EPSS score is < 1% and the vulnerability is not listed in CISA KEV, indicating no widespread exploitation has been reported. Nevertheless, due to the need for high privileged access and potential for unauthorized data exposure, it poses a significant risk within environments where such privileges exist.