CVE-2026-60791

Received Received - Intake

Siebel CRM Deployment Network Access Vulnerability

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-60791

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_crm_deployment	From 17.0 (inc) to 26.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability affects Oracle Siebel CRM Deployment versions 17.0 to 26.6. It allows an unauthenticated attacker with access to the physical network segment where the system runs to exploit it. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data in the Siebel CRM Deployment.

Impact Analysis

If you use Oracle Siebel CRM Deployment versions 17.0 to 26.6, an attacker with network access could compromise your system. This may result in unauthorized data manipulation, deletion, or theft, potentially disrupting business operations or leaking sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating GDPR and HIPAA requirements for data confidentiality and integrity. Non-compliance may result in legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Apply the latest Oracle Siebel CRM patches or updates for versions 17.0-26.6 to address the vulnerability. Restrict physical and network access to the Siebel CRM Deployment system to trusted users only. Monitor network traffic for unauthorized access attempts to the affected component.

Hi! I’m here to help you understand CVE-2026-60791. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70