{"id":"CVE-2026-101402","kind":"vulnerability","aliases":["CVE-2026-101402"],"related":[],"title":"Oracle Siebel Marketing: Email Marketing flaw allows partial denial of service","description":"Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).  Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel Apps - Marketing. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","summary":"A flaw in the Email Marketing component of Oracle Siebel CRM Apps - Marketing lets an unauthenticated network attacker over HTTP cause a partial denial of service. The sources say it is hard to exploit and that only availability is affected, with no confidentiality or integrity impact.","severity":"low","cvss":3.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["crm","marketing","oracle","siebel","vendor"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T22:17:48+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","triaged_at":"2026-10-25T04:44:01+00:00","updated_at":"2026-10-25T04:44:01+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T04:44:01Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Oracle Siebel Marketing: Email Marketing flaw allows partial denial of service","impact":"low","summary":"A flaw in the Email Marketing component of Oracle Siebel CRM Apps - Marketing lets an unauthenticated network attacker over HTTP cause a partial denial of service. The sources say it is hard to exploit and that only availability is affected, with no confidentiality or integrity impact.","category":"vendor","nicknames":[],"who_cares":["siebel","oracle","crm","marketing"],"confidence":0.6,"needs_auth":"no","worst_case":"Partial denial of service of the marketing application","analyst_note":"Check Oracle's Critical Patch Update advisory for the fixed Siebel Apps - Marketing version and any required configuration, since the sources give no fix or check.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running Oracle Siebel CRM Apps - Marketing with the Email Marketing component in the affected version range 17.0-26.9 are affected. The sources do not say which deployment settings are required, so teams running other Siebel modules or unsupported versions should confirm against Oracle's advisory.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000585,"input_tokens":3470,"output_tokens":475,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-101402':14A,17A '-2026':13A,16A '-26.9':90C '/av':142C '17.0':89C '3.1':132C,141C '3.7':135C 'abil':117C 'access':100C 'affect':62B,87C 'allow':7A,95C 'app':34B,73C,106C,129C 'attack':40B,97C,109C 'avail':60B,136C 'base':133C 'caus':43B,119C 'compon':29B,80C 'compromis':104C 'confidenti':65B 'crm':18B,33B,79C 'cve':12A,15A 'cvss':131C,138C,140C 'denial':9A,46B,122C 'difficult':91C 'dos':126C 'email':4A,27B,81C 'exploit':56B,93C 'flaw':6A,24B 'h/pr':144C 'hard':54B 'http':42B,102C 'impact':68B,137C 'integr':67B 'l':150C 'let':36B 'market':3A,5A,19B,28B,35B,74C,82C,107C,130C 'n/a':149C 'n/ac':143C 'n/i':148C 'n/s':146C 'n/ui':145C 'network':39B,99C 'oracl':1A,20B,31B,77C 'partial':8A,45B,121C,125C 'product':75C 'result':114C 'say':51B 'score':134C 'servic':11A,48B,124C 'siebel':2A,21B,32B,72C,78C,105C,128C 'sourc':50B 'success':108C 'support':83C 'u/c':147C 'unauthent':38B,96C 'unauthor':116C 'vector':139C 'vendor':22B 'version':84C 'via':101C 'vulner':69C,94C,112C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle Siebel CRM Apps - Marketing with the Email Marketing component in the affected version range 17.0-26.9 are affected. The sources do not say which deployment settings are required, so teams running other Siebel modules or unsupported versions should confirm against Oracle's advisory.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101402","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101402","severity":null,"published_at":"2026-10-20T22:17:48+00:00","modified_at":"2026-10-23T03:16:30+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}