CVE-2026-46919

Analyzed Analyzed - Analysis Complete

Authentication Bypass in Siebel CRM Cloud Applications

Publication date: 2026-06-17

Last updated on: 2026-06-18

Assigner: Oracle

Description

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-17

Last Modified

2026-06-18

Generated

2026-07-08

AI Q&A

2026-06-17

EPSS Evaluated

2026-07-06

NVD

CVE-2026-46919

EUVD

EUVD-2026-37237

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_cloud_manager	From 17.0 (inc) to 26.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Siebel CRM Cloud Applications product of Oracle Siebel CRM, specifically in the Siebel Cloud Manager component. It affects supported versions from 17.0 to 26.5. The vulnerability is easily exploitable by an unauthenticated attacker who has network access via HTTP.

A successful attack can lead to the complete takeover of the Siebel CRM Cloud Applications.

Impact Analysis

The impact of this vulnerability is severe, with a CVSS 3.1 base score of 9.8, indicating critical severity.

Confidentiality: High impact, meaning sensitive data could be exposed.
Integrity: High impact, meaning data could be altered or corrupted.
Availability: High impact, meaning the service could be disrupted or taken offline.

Overall, an attacker could fully compromise the Siebel CRM Cloud Applications, potentially leading to data breaches, loss of data integrity, and denial of service.

Compliance Impact

The vulnerability allows an unauthenticated attacker to compromise Siebel CRM Cloud Applications, resulting in a complete takeover with high impacts on confidentiality, integrity, and availability.

Such a compromise could lead to unauthorized access to sensitive personal data, which may affect compliance with data protection regulations like GDPR and HIPAA that require safeguarding confidentiality and integrity of personal and health information.

However, specific details on compliance impact or mitigation related to these standards are not provided in the available information.

Hi! I’m here to help you understand CVE-2026-46919. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70