CVE-2026-101392

Analyzed Analyzed - Analysis Complete

Siebel Apps - Marketing Information Disclosure Vulnerability

Publication date: 2026-10-20

Last updated on: 2026-11-05

Assigner: Oracle

Description

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-05

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101392

EUVD

EUVD-2026-105808

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_crm	From 17.0 (inc) to 26.9 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing component affecting versions 17.0 to 26.9. It allows a low-privileged attacker with system access to exploit the flaw and gain unauthorized access to sensitive data or full access to all data accessible by the application. The vulnerability has a CVSS base score of 5.5, indicating moderate risk with confidentiality impacts.

Impact Analysis

If you use Oracle Siebel Apps - Marketing versions 17.0 to 26.9, an attacker with local system access could exploit this to steal critical data or gain full access to all application data. This could lead to data breaches, unauthorized data exposure, or further compromise of your systems.

Compliance Impact

This vulnerability could lead to unauthorized data access, which may violate GDPR (data protection) and HIPAA (health data privacy) requirements. Organizations using affected versions may face compliance violations, legal penalties, or reputational damage due to potential data breaches.

Mitigation Strategies

Apply the latest Oracle Siebel Apps - Marketing patches or updates provided by Oracle to address the vulnerability in versions 17.0-26.9.

Hi! I’m here to help you understand CVE-2026-101392. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...