The vulnerability is in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications, allowing an attacker with low privilege and network access over HTTP to modify, delete, or create data. This results in integrity compromise of all data accessible through the application. The CVSS score of 5.3 reflects a moderate severity with primary impact on integrity, with no direct confidentiality or availability disruption.

Oracle Siebel CRM Cloud Applications, specifically the Siebel Cloud Manager component. Versions from 22.3 up to 26.9 are affected.

The CVSS base score of 5.3 places the vulnerability in the moderate category. The EPSS score of < 1% indicates a very low probability of exploitation, although not zero. The low privileged attacker can reach the target via network, suggesting a relatively low barrier to attack. The vulnerability is not listed in the CISA KEV catalog, indicating no known public exploits. If exploited, attackers could compromise the integrity of the entire Siebel CRM Cloud Applications environment, impacting business data and trust.