{"id":"CVE-2026-101495","kind":"vulnerability","aliases":["CVE-2026-101495"],"related":[],"title":"Oracle Siebel CRM: unauthenticated network flaw allows full takeover","description":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).","summary":"Oracle Siebel CRM Development, in its Siebel Approval Manager component, has a flaw that lets an unauthenticated remote attacker over HTTP take over the product. Exploitation needs a person other than the attacker to take an action, such as opening a crafted page.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise-crm","oracle","siebel-crm","vendor"],"not_affected_if":["version-outside-17.0-26.9"],"how_to_check":"Confirm whether Siebel CRM is deployed and which version runs, against the affected range 17.0-26.9 given in the NVD entry.","fix":"Apply the patch from Oracle's Siebel CRM security advisory for your version; the specific patch identifier is unknown from the sources.","status":"open","published_at":"2026-10-20T22:17:58+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","triaged_at":"2026-10-23T22:32:45+00:00","updated_at":"2026-10-23T22:32:45+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T22:32:45Z","model":"claude-haiku-5-5","output":{"fix":"Apply the patch from Oracle's Siebel CRM security advisory for your version; the specific patch identifier is unknown from the sources.","reach":"internet","title":"Oracle Siebel CRM: unauthenticated network flaw allows full takeover","impact":"high","summary":"Oracle Siebel CRM Development, in its Siebel Approval Manager component, has a flaw that lets an unauthenticated remote attacker over HTTP take over the product. Exploitation needs a person other than the attacker to take an action, such as opening a crafted page.","category":"vendor","who_cares":["siebel-crm","oracle","enterprise-crm"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker takes over the Siebel CRM server, reading and changing all data","analyst_note":"Find Oracle's Siebel CRM Critical Patch Update advisory for CVE-2026-101495 to confirm the patch version and whether Approval Manager is required; source NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-101495","how_to_check":"Confirm whether Siebel CRM is deployed and which version runs, against the affected range 17.0-26.9 given in the NVD entry.","needs_analyst":true,"not_affected_if":["version-outside-17.0-26.9"],"user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000554,"input_tokens":3071,"output_tokens":494,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101495':12A,15A '-2026':11A,14A '-26.9':89C '/av':145C '17.0':88C '3.1':132C,144C '8.8':135C 'access':98C 'action':60B 'affect':86C 'allow':7A,93C 'approv':31B,80C 'attack':42B,56B,95C,107C,117C,119C 'avail':139C 'base':133C 'compon':33B,78C 'compromis':102C 'confidenti':136C 'craft':65B 'crm':3A,18B,22B,26B,71C,77C,104C,129C 'cve':10A,13A 'cvss':131C,141C,143C 'develop':27B,72C,105C,130C 'easili':90C 'enterpris':17B 'enterprise-crm':16B 'exploit':49B,91C 'flaw':6A,36B 'full':8A 'h':153C 'h/a':152C 'h/i':151C 'http':44B,100C 'human':109C 'impact':140C 'integr':137C 'interact':110C 'l/pr':147C 'let':38B 'manag':32B,81C 'n/ac':146C 'n/ui':148C 'need':50B 'network':5A,97C 'open':63B 'oracl':1A,19B,24B,75C 'page':66B 'person':52B,113C 'product':48B,73C 'r/s':149C 'remot':41B 'requir':108C 'result':124C 'score':134C 'siebel':2A,21B,25B,30B,70C,76C,79C,103C,128C 'siebel-crm':20B 'success':106C,118C 'support':82C 'take':45B,58B 'takeov':9A,126C 'u/c':150C 'unauthent':4A,40B,94C 'vector':142C 'vendor':23B 'version':83C 'via':99C 'vulner':67C,92C,122C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101495","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101495","severity":null,"published_at":"2026-10-20T22:17:58+00:00","modified_at":"2026-10-21T14:29:49+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}