Live › vulnerability › CVE-2026-101399
Go to dashboardOracle Siebel CRM's Marketing component, versions 17.0 through 26.9, can be attacked over the network via SMTP without credentials. A successful attack causes a partial denial of service, making the Marketing application unavailable for some functions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Marketing in the affected version range where the SMTP path is reachable over the network. The sources do not describe the exact configuration needed, so teams that do not run Siebel Marketing can skip it.
No product ranges from the sources yet.
unknown if the sources do not say how to read itunknown if the sources do not sayunknown for the exact patch version the sources do not nameEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
This page as .md · .json · in your agent: get_signal("CVE-2026-101399")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.