{"id":"CVE-2026-101392","kind":"vulnerability","aliases":["CVE-2026-101392"],"related":[],"title":"Oracle Siebel Marketing: low-privilege user can read critical CRM data","description":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","summary":"Oracle Siebel CRM's Marketing component has a flaw that lets a low-privileged logged-in user access data they should not see. Successful exploitation exposes critical data accessible to Siebel Marketing, with no change to integrity or availability.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise","oracle-crm","package","siebel"],"not_affected_if":["unaffected-version"],"how_to_check":"- Check whether Siebel Apps - Marketing is deployed and which version: unknown\n- Confirm the installed version falls in the affected range 17.0-26.9 per the Oracle advisory: unknown","fix":"- Apply the Oracle Critical Patch Update fix for Siebel Apps - Marketing: unknown","status":"open","published_at":"2026-10-20T22:17:46+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","triaged_at":"2026-10-25T04:12:28+00:00","updated_at":"2026-10-25T04:12:28+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:12:28Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update fix for Siebel Apps - Marketing: unknown","reach":"network","title":"Oracle Siebel Marketing: low-privilege user can read critical CRM data","impact":"medium","summary":"Oracle Siebel CRM's Marketing component has a flaw that lets a low-privileged logged-in user access data they should not see. Successful exploitation exposes critical data accessible to Siebel Marketing, with no change to integrity or availability.","category":"package","nicknames":[],"who_cares":["siebel","oracle-crm","enterprise"],"confidence":0.6,"needs_auth":"yes","worst_case":"Low-privileged user reads critical Siebel Marketing data","analyst_note":"Check the Oracle Critical Patch Update advisory for the patched Siebel Marketing version and detection steps; the NVD entry alone gives neither.","how_to_check":"- Check whether Siebel Apps - Marketing is deployed and which version: unknown\n- Confirm the installed version falls in the affected range 17.0-26.9 per the Oracle advisory: unknown","needs_analyst":true,"not_affected_if":["unaffected-version"],"who_is_affected":"Organizations running Oracle Siebel CRM Marketing in the affected version range 17.0-26.9, where users have logon access to the infrastructure hosting Siebel Marketing. The sources do not say which configurations or deployment patterns are exposed beyond the version range, so teams outside Siebel Marketing can likely skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000634,"input_tokens":3480,"output_tokens":571,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101392':15A,18A '-2026':14A,17A '-26.9':86C '/av':143C '17.0':85C '3.1':133C,142C '5.5':136C 'access':44B,55B,118C,124C,130C 'affect':83C 'allow':90C 'app':70C,101C,107C,128C 'attack':93C,110C 'avail':65B 'base':134C 'chang':61B 'complet':123C 'compon':30B,77C 'compromis':105C 'confidenti':137C 'critic':10A,53B,120C 'crm':11A,22B,27B,76C 'cve':13A,16A 'cvss':132C,139C,141C 'data':12A,45B,54B,121C,131C 'easili':87C 'enterpris':19B 'execut':103C 'exploit':51B,88C 'expos':52B 'flaw':33B 'h/i':149C 'impact':138C 'infrastructur':98C 'integr':63B 'l/ac':144C 'l/pr':145C 'l/ui':146C 'let':35B 'log':41B 'logged-in':40B 'logon':95C 'low':5A,38B,91C 'low-privileg':4A,37B 'market':3A,29B,58B,71C,78C,102C,108C,129C 'n':151C 'n/a':150C 'n/s':147C 'oracl':1A,21B,25B,74C 'oracle-crm':20B 'packag':23B 'privileg':6A,39B,92C 'product':72C 'read':9A 'result':115C 'score':135C 'see':49B 'siebel':2A,24B,26B,57B,69C,75C,100C,106C,127C 'success':50B,109C 'support':79C 'u/c':148C 'unauthor':117C 'user':7A,43B 'vector':140C 'version':80C 'vulner':66C,89C,113C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle Siebel CRM Marketing in the affected version range 17.0-26.9, where users have logon access to the infrastructure hosting Siebel Marketing. The sources do not say which configurations or deployment patterns are exposed beyond the version range, so teams outside Siebel Marketing can likely skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101392","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101392","severity":null,"published_at":"2026-10-20T22:17:46+00:00","modified_at":"2026-10-21T18:45:11+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}