Live › vulnerability › CVE-2026-101453
Go to dashboardOracle Siebel CRM Deployment, in the Server Infrastructure component, has a flaw that lets a user with high privileges on the host take over the Siebel deployment. The sources rate it CVSS 6.7 with local access, high privileges and no user interaction.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Deployment in the affected version range 17.0 to 26.9, where the attacker already has a logon to the host running the deployment. Teams not running Siebel CRM can skip it. The sources do not list specific patch versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101453")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.