CVE-2026-91427

Analyzed Analyzed - Analysis Complete

Denial of Service in Oracle Siebel CRM Deployment

Publication date: 2026-10-20

Last updated on: 2026-11-04

Assigner: Oracle

Description

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-04

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-91427

EUVD

EUVD-2026-106677

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_crm	From 17.0 (inc) to 26.9 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-404	The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Siebel CRM Deployment affecting versions 17.0 to 26.9. It allows a highly privileged attacker with local access to cause a partial denial of service in the Siebel CRM Deployment infrastructure.

Detection Guidance

Detection requires monitoring for partial denial of service events in Siebel CRM Deployment infrastructure. Check Oracle Siebel logs for unusual server crashes or performance degradation. No specific commands are provided in the available context.

Impact Analysis

The impact is limited to partial disruption of Siebel CRM Deployment services. It does not allow data theft or unauthorized access beyond causing downtime for the system.

Compliance Impact

This vulnerability has a low impact on compliance with standards like GDPR or HIPAA. It only allows partial denial of service with a CVSS score of 2.3, which does not involve unauthorized data access or disclosure. Compliance risks are minimal as no sensitive data exposure or integrity issues are reported.

Mitigation Strategies

Apply Oracle's official patches or updates for Siebel CRM Deployment versions 17.0-26.9. Restrict logon privileges to the minimum required. Monitor server stability and performance closely.

Hi! I’m here to help you understand CVE-2026-91427. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...