Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Oracle Corporation | Siebel CRM Cloud Applications | affected |
|
No data.
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2026.html |
|
Tue, 20 Oct 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N). | |
| First Time appeared |
Oracle
Oracle siebel Crm Cloud Applications |
|
| CPEs | cpe:2.3:a:oracle:siebel_crm_cloud_applications:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle siebel Crm Cloud Applications |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-10-20T21:25:35.810Z
Reserved: 2026-09-14T22:10:16.630Z
Link: CVE-2026-91371
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-20T22:20:40.070
Modified: 2026-10-20T22:20:40.070
Link: CVE-2026-91371
Redhat
No data.
OpenCVE Enrichment
No data.
No weakness.