CVE-2026-60751

Analyzed Analyzed - Analysis Complete

Authentication Bypass in Siebel Apps Marketing

Publication date: 2026-08-18

Last updated on: 2026-08-26

Assigner: Oracle

Description

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-26

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-60751

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_apps_-_marketing	From 17.0 (inc) to 26.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability affects Oracle Siebel CRM's Marketing product versions 17.0 to 26.6. It allows a low-privileged attacker with network access via HTTP to take over the Siebel Apps - Marketing system. The attack can impact confidentiality, integrity, and availability of the system.

Detection Guidance

Detection of this vulnerability requires checking for vulnerable versions of Oracle Siebel Apps - Marketing (versions 17.0-26.6). Review installed software versions and compare against the affected range. No specific commands are provided in the context for direct detection.

Impact Analysis

An attacker could gain full control of the Siebel Apps - Marketing system, leading to unauthorized access, data theft, or system disruption. This could affect business operations, customer data, and sensitive marketing information.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health information privacy) requirements. Compliance failures may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply the latest security patches from Oracle for Siebel Apps - Marketing versions 17.0-26.6. Restrict network access to the HTTP interface to trusted sources only. Monitor for unusual activity in the Siebel Apps - Marketing component.

Hi! I’m here to help you understand CVE-2026-60751. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70