CVE-2026-46886
Awaiting Analysis Awaiting Analysis - Queue
Authentication Bypass in Siebel Apps - Marketing

Publication date: 2026-06-17

Last updated on: 2026-06-17

Assigner: Oracle

Description
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-17
Last Modified
2026-06-17
Generated
2026-06-17
AI Q&A
2026-06-17
EPSS Evaluated
N/A
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
oracle siebel_crm From 17.0 (inc) to 26.5 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

The impact of this vulnerability is severe, as it allows an attacker to take over the Siebel Apps - Marketing application.

  • Confidentiality impact: High - sensitive information could be exposed.
  • Integrity impact: High - data could be altered or corrupted.
  • Availability impact: High - the application could be disrupted or made unavailable.
Executive Summary

This vulnerability exists in the Siebel Apps - Marketing product of Oracle Siebel CRM, specifically in the Marketing component. It affects supported versions from 17.0 to 26.5. The vulnerability is easily exploitable by a low privileged attacker who has network access via HTTP.

If successfully exploited, the attacker can compromise the Siebel Apps - Marketing application, potentially taking full control over it.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-46886. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart