Description
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-10-20
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

A low‑privileged attacker with network access via HTTP can trigger a hang or a repeatable crash of the Oracle Siebel CRM Deployment Server Infrastructure, resulting in a complete denial of service.

Affected Systems

Oracle Siebel CRM Deployment, versions 17.0 through 26.9.

Risk and Exploitability

The vulnerability has a CVSS 3.1 Base Score of 6.5, indicating a moderate severity. It is exploitable over the network without user interaction, requiring only low privileged credentials. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, so no current known exploitation activity is reported, but the moderate CVSS and direct network attack vector still represent a significant risk.

Generated by OpenCVE AI on October 21, 2026 at 09:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest patch for Oracle Siebel CRM Deployment released in the CPU Oct 2026 advisory.
  • Configure firewall or access‑control rules to limit HTTP access to the Siebel CRM Deployment server to trusted hosts or networks.
  • Monitor server logs and set alerts for repeated crashes or hangs to detect potential exploitation attempts.

Generated by OpenCVE AI on October 21, 2026 at 09:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 04 Nov 2026 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Oracle siebel Crm
CPEs cpe:2.3:a:oracle:siebel_crm:*:*:*:*:*:*:*:*
Vendors & Products Oracle siebel Crm

Fri, 23 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 10:15:00 +0000

Type Values Removed Values Added
Title Denial of Service via HTTP in Oracle Siebel CRM Deployment Server Infrastructure
Weaknesses CWE-400

Tue, 20 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
First Time appeared Oracle
Oracle siebel Crm Deployment
CPEs cpe:2.3:a:oracle:siebel_crm_deployment:*:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle siebel Crm Deployment
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Oracle Siebel Crm Siebel Crm Deployment
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-10-23T20:20:35.344Z

Reserved: 2026-09-14T22:10:16.634Z

Link: CVE-2026-91435

cve-icon Vulnrichment

Updated: 2026-10-23T20:20:29.271Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-20T22:20:46.980

Modified: 2026-11-04T15:07:11.823

Link: CVE-2026-91435

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T17:30:09Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption