Live › vulnerability › CVE-2026-101447
Go to dashboardA flaw in the Workflow component of Oracle Siebel CRM Development lets a low-privileged user reach the product over HTTP and take it over when another person takes an action. The sources rate it CVSS 7.1 with high confidentiality, integrity and availability impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Development in the affected version range 25.12-26.9 with the Workflow component exposed over HTTP. Sites on other Siebel versions or without this product can skip it. The sources do not say which Workflow configurations are required.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 25.12-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101447")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.