Live › vulnerability › CVE-2026-101402
Go to dashboardA flaw in the Email Marketing component of Oracle Siebel CRM Apps - Marketing lets an unauthenticated network attacker over HTTP cause a partial denial of service. The sources say it is hard to exploit and that only availability is affected, with no confidentiality or integrity impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Apps - Marketing with the Email Marketing component in the affected version range 17.0-26.9 are affected. The sources do not say which deployment settings are required, so teams running other Siebel modules or unsupported versions should confirm against Oracle's advisory.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
This page as .md · .json · in your agent: get_signal("CVE-2026-101402")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.