This vulnerability allows a low‑privileged attacker with network access via HTTP to compromise Oracle Siebel CRM Deployment. An attacker can cause the system to hang or crash, and can also read, insert, update, or delete a subset of accessible data, giving unauthorized modification and disclosure of information. The CVSS score of 6.4 indicates moderate severity with moderate impacts on confidentiality and integrity and a high impact on availability.

Oracle Siebel CRM Deployment, versions 17.0 through 26.9 are affected.

The CVSS score reflects a moderate risk, and although the EPSS score is not available, the lack of a KEV listing suggests that widespread exploitation has not yet been observed. The likely attack vector is remote over HTTP, and only a low‑privileged attacker with network access is required to exploit this weakness, making the vulnerability a concern for systems exposed to untrusted networks.