{"id":"CVE-2026-101453","kind":"vulnerability","aliases":["CVE-2026-101453"],"related":[],"title":"Oracle Siebel CRM Deployment: local high-privilege user can take over server","description":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","summary":"Oracle Siebel CRM Deployment, in the Server Infrastructure component, has a flaw that lets a user with high privileges on the host take over the Siebel deployment. The sources rate it CVSS 6.7 with local access, high privileges and no user interaction.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["oracle","self-hosted","siebel-crm","vendor"],"not_affected_if":["not-siebel-crm"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-20T22:17:53+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","triaged_at":"2026-10-25T03:46:41+00:00","updated_at":"2026-10-25T03:46:41+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:46:41Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Oracle Siebel CRM Deployment: local high-privilege user can take over server","impact":"high","summary":"Oracle Siebel CRM Deployment, in the Server Infrastructure component, has a flaw that lets a user with high privileges on the host take over the Siebel deployment. The sources rate it CVSS 6.7 with local access, high privileges and no user interaction.","category":"vendor","nicknames":[],"who_cares":["siebel-crm","oracle","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"attacker with host logon takes over Siebel deployment","analyst_note":"Check Oracle's Critical Patch Update advisory for the fixed Siebel CRM Deployment version and patch list, since the sources give none.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["not-siebel-crm"],"who_is_affected":"Organizations running Oracle Siebel CRM Deployment in the affected version range 17.0 to 26.9, where the attacker already has a logon to the host running the deployment. Teams not running Siebel CRM can skip it. The sources do not list specific patch versions.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000576,"input_tokens":3475,"output_tokens":457,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101453':16A,19A '-2026':15A,18A '-26.9':91C '/av':141C '17.0':90C '3.1':128C,140C '6.7':60B,131C 'access':63B 'affect':88C 'allow':95C 'attack':98C,115C 'avail':135C 'base':129C 'compon':36B,81C 'compromis':110C 'confidenti':132C 'crm':3A,26B,30B,74C,80C,106C,112C,125C 'cve':14A,17A 'cvss':59B,127C,137C,139C 'deploy':4A,31B,54B,75C,107C,113C,126C 'easili':92C 'execut':108C 'exploit':93C 'flaw':39B 'h':149C 'h/a':148C 'h/i':147C 'h/ui':144C 'high':7A,45B,64B,96C 'high-privileg':6A 'host':23B,49B 'impact':136C 'infrastructur':35B,83C,103C 'integr':133C 'interact':69B 'l/ac':142C 'l/pr':143C 'let':41B 'local':5A,62B 'logon':100C 'n/s':145C 'oracl':1A,20B,28B,78C 'privileg':8A,46B,65B,97C 'product':76C 'rate':57B 'result':120C 'score':130C 'self':22B 'self-host':21B 'server':13A,34B,82C 'siebel':2A,25B,29B,53B,73C,79C,105C,111C,124C 'siebel-crm':24B 'sourc':56B 'success':114C 'support':84C 'take':11A,50B 'takeov':122C 'u/c':146C 'user':9A,43B,68B 'vector':138C 'vendor':27B 'version':85C 'vulner':70C,94C,118C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle Siebel CRM Deployment in the affected version range 17.0 to 26.9, where the attacker already has a logon to the host running the deployment. Teams not running Siebel CRM can skip it. The sources do not list specific patch versions.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:53+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101453","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101453","severity":null,"published_at":"2026-10-20T22:17:53+00:00","modified_at":"2026-10-21T14:29:49+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}