CVE-2026-47032

Received Received - Intake

Siebel CRM End User Partial Denial of Service

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: Oracle

Description

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Redwood UI). Supported versions that are affected are 24.4-26.3. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel CRM End User, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM End User. CVSS 3.1 Base Score 2.6 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-21

Generated

2026-07-22

AI Q&A

2026-07-22

EPSS Evaluated

N/A

NVD

CVE-2026-47032

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_crm_end_user	From 24.4 (inc) to 26.3 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Siebel CRM End User (component: Redwood UI) affecting versions 24.4 to 26.3. It allows a high-privileged attacker with network access via HTTP to potentially cause a partial denial of service (DOS) in the application. Exploitation requires human interaction from someone other than the attacker and may impact additional products.

Detection Guidance

Detection requires monitoring for unusual activity in Siebel CRM End User. Check HTTP logs for unexpected requests from high-privileged users. Look for partial denial of service events or unusual UI interactions. No specific commands are provided in the CVE details.

Impact Analysis

If exploited, this vulnerability could lead to a partial denial of service in Siebel CRM End User, disrupting its availability. Since attacks may affect other products, there could be broader system impacts. However, the difficulty of exploitation and required high privileges limit the risk.

Mitigation Strategies

Apply Oracle's official patches for Siebel CRM End User versions 24.4-26.3. Restrict network access to the HTTP interface. Monitor for partial denial of service attempts. Limit high-privileged user access where possible.

Hi! I’m here to help you understand CVE-2026-47032. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70