CVE-2026-87339

Analyzed Analyzed - Analysis Complete

Siebel CRM Integration Unauthorized Data Read Vulnerability

Publication date: 2026-10-20

Last updated on: 2026-11-04

Assigner: Oracle

Description

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-04

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-87339

EUVD

EUVD-2026-106381

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_crm	From 17.0 (inc) to 26.9 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability affects Oracle Siebel CRM Integration versions 17.0 to 26.9. It allows an unauthenticated attacker to potentially access some data through the REST component via HTTP. Exploitation requires network access and human interaction from someone other than the attacker. The impact is limited to unauthorized read access to a subset of accessible data.

Detection Guidance

Detection of CVE-2026-87339 requires monitoring HTTP traffic for unusual requests targeting the Siebel CRM Integration REST component. Check server logs for unauthenticated access attempts or suspicious interactions involving data retrieval. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an attacker to read some data from your Siebel CRM Integration system. The attacker would need network access and would require someone else to interact with a malicious link or page. The impact is restricted to data exposure and does not allow modification or deletion of data.

Compliance Impact

The vulnerability allows unauthorized read access to a subset of Siebel CRM Integration data, which could potentially expose sensitive personal or health information. This may impact compliance with GDPR (if personal data is involved) or HIPAA (if protected health information is compromised), depending on the data accessed.

Mitigation Strategies

Apply the latest Oracle Siebel CRM Integration patches or updates to versions not affected by this vulnerability (17.0-26.9). Monitor Oracle's security advisories for updates and restrict network access to the REST component where possible.

Hi! I’m here to help you understand CVE-2026-87339. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...