CVE-2026-101399

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in Siebel Apps - Marketing

Publication date: 2026-10-20

Last updated on: 2026-10-22

Assigner: Oracle

Description

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-22

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101399

EUVD

EUVD-2026-105815

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	Siebel Apps - Marketing	17.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing product versions 17.0 to 26.9. It allows an unauthenticated attacker with network access via SMTP to cause a partial denial of service (DOS) by compromising the marketing component.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable versions of Oracle Siebel Apps - Marketing. Verify installed versions against affected releases 17.0-26.9. Inspect SMTP service configurations for exposed interfaces. Monitor network traffic for unusual patterns targeting the Siebel Apps - Marketing component.

Impact Analysis

An attacker could exploit this to disrupt the availability of Siebel Apps - Marketing, leading to partial service outages. This may affect business operations relying on the marketing component.

Compliance Impact

This vulnerability causes partial denial of service in Siebel Apps - Marketing, which may disrupt availability of customer data processing. GDPR requires ensuring availability of personal data, so prolonged outages could impact compliance. HIPAA requires maintaining access to protected health information, so similar risks apply if this system handles such data.

Mitigation Strategies

Apply Oracle's official security patches immediately. Restrict network access to the SMTP interface of Siebel Apps - Marketing. Disable unnecessary services or interfaces. Monitor system logs for signs of exploitation attempts.

Hi! I’m here to help you understand CVE-2026-101399. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...