{"id":"CVE-2026-101468","kind":"vulnerability","aliases":["CVE-2026-101468"],"related":[],"title":"Oracle Siebel CRM Cloud Gateway flaw exposes CRM data to unauthenticated network attackers","description":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","summary":"Oracle Siebel CRM Deployment's Cloud Gateway component has a flaw that can be triggered over HTTP by an unauthenticated attacker with network access. A successful attack gives unauthorized read access to critical CRM data.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cloud-gateway","enterprise-crm","oracle","siebel-crm","vendor"],"not_affected_if":["unknown"],"how_to_check":"- Confirm whether Siebel CRM Deployment is in use and which release is running, affected versions are listed as 17.0 through 26.9\n- Check whether the Cloud Gateway component is deployed and reachable over HTTP from untrusted networks\n- Check the Oracle Critical Patch Update advisory for the installed Siebel release, as the sources do not give a fixed-version list","fix":"- Apply the Oracle Siebel CRM Deployment patch for the affected Cloud Gateway component (fixed version: unknown from the sources)\n- Restrict network access to the Cloud Gateway endpoint until patched","status":"open","published_at":"2026-10-20T22:17:55+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","triaged_at":"2026-10-25T03:20:33+00:00","updated_at":"2026-10-25T03:20:33+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:20:33Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Siebel CRM Deployment patch for the affected Cloud Gateway component (fixed version: unknown from the sources)\n- Restrict network access to the Cloud Gateway endpoint until patched","reach":"internet","title":"Oracle Siebel CRM Cloud Gateway flaw exposes CRM data to unauthenticated network attackers","impact":"high","summary":"Oracle Siebel CRM Deployment's Cloud Gateway component has a flaw that can be triggered over HTTP by an unauthenticated attacker with network access. A successful attack gives unauthorized read access to critical CRM data.","category":"vendor","nicknames":[],"who_cares":["siebel-crm","oracle","cloud-gateway","enterprise-crm"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker reads critical and accessible CRM data without credentials","analyst_note":"Find the Oracle Critical Patch Update advisory for this CVE to confirm the fixed Siebel release and any configuration conditions; source list has only NVD.","how_to_check":"- Confirm whether Siebel CRM Deployment is in use and which release is running, affected versions are listed as 17.0 through 26.9\n- Check whether the Cloud Gateway component is deployed and reachable over HTTP from untrusted networks\n- Check the Oracle Critical Patch Update advisory for the installed Siebel release, as the sources do not give a fixed-version list","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running Oracle Siebel CRM Deployment with the Cloud Gateway component in versions 17.0 through 26.9 that accept HTTP requests from networks an attacker can reach. The sources do not describe further configuration conditions, so exposure is likely tied to any reachable deployment of that component.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000688,"input_tokens":3468,"output_tokens":683,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101468':16A,19A '-2026':15A,18A '-26.9':87C '/av':138C '17.0':86C '3.1':128C,137C '7.5':131C 'access':54B,61B,96C,113C,119C,125C 'affect':84C 'allow':91C 'attack':13A,51B,57B,93C,105C 'base':129C 'cloud':4A,21B,36B,78C 'cloud-gateway':20B 'complet':118C 'compon':38B,77C 'compromis':100C 'confidenti':132C 'critic':63B,115C 'crm':3A,8A,25B,29B,33B,64B,70C,76C,102C,123C 'cve':14A,17A 'cvss':127C,134C,136C 'data':9A,65B,116C,126C 'deploy':34B,71C,103C,124C 'easili':88C 'enterpris':24B 'enterprise-crm':23B 'exploit':89C 'expos':7A 'flaw':6A,41B 'gateway':5A,22B,37B,79C 'give':58B 'h/i':144C 'http':47B,98C 'impact':133C 'l/pr':140C 'n':146C 'n/a':145C 'n/ac':139C 'n/s':142C 'n/ui':141C 'network':12A,53B,95C 'oracl':1A,26B,31B,74C 'product':72C 'read':60B 'result':110C 'score':130C 'siebel':2A,28B,32B,69C,75C,101C,122C 'siebel-crm':27B 'success':56B,104C 'support':80C 'trigger':45B 'u/c':143C 'unauthent':11A,50B,92C 'unauthor':59B,112C 'vector':135C 'vendor':30B 'version':81C 'via':97C 'vulner':66C,90C,108C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle Siebel CRM Deployment with the Cloud Gateway component in versions 17.0 through 26.9 that accept HTTP requests from networks an attacker can reach. The sources do not describe further configuration conditions, so exposure is likely tied to any reachable deployment of that component.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101468","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101468","severity":null,"published_at":"2026-10-20T22:17:55+00:00","modified_at":"2026-10-21T19:16:50+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}