Live › vulnerability › CVE-2026-101437
Go to dashboardA flaw in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications lets a highly privileged remote user over HTTP create, change or delete critical data and read a subset of accessible data. The sources say the attack is hard to carry out and can spill over to other products through scope change.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Cloud Applications in the affected version range 22.3 to 26.9, where the Siebel Cloud Manager component is reachable over HTTP. Attackers need high privileges, so teams that do not run this Oracle product can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Cloud Applications accessible data as well as unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 6.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101437")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.