CVE-2026-60808

Received Received - Intake

Memory Corruption in Siebel Apps - Marketing

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. While the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Marketing accessible data as well as unauthorized access to critical data or complete access to all Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-60808

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_crm	From 17.0 (inc) to 26.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Siebel CRM's Siebel Apps - Marketing component, specifically affecting versions 17.0 to 26.6. It allows a low-privileged attacker with system access to exploit the system and potentially compromise other connected products. The flaw enables unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data within the Siebel Apps - Marketing system.

Impact Analysis

If you use Oracle Siebel CRM with the affected versions, an attacker could gain unauthorized access to your marketing data, alter or delete critical information, or steal sensitive data. This could disrupt marketing operations, lead to data breaches, and cause reputational or financial harm.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties, fines, or loss of trust from customers and regulators.

Mitigation Strategies

Apply the latest Oracle Siebel CRM patches for versions 17.0-26.6. Restrict user privileges to minimize access. Monitor Siebel Apps - Marketing logs for suspicious activities. Isolate the component if possible.

Hi! I’m here to help you understand CVE-2026-60808. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70