Live › vulnerability › CVE-2026-91377
Go to dashboardOracle Siebel CRM Integration's Open Integration component has a flaw in versions 25.12 through 26.9 that lets an unauthenticated attacker over HTTP reach data. Successful exploitation gives unauthorized access to critical data, with high confidentiality impact and no integrity or availability impact per the CVSS vector.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Integration in the affected version range with the Open Integration component reachable over HTTP from the network. Deployments where that endpoint is not network-reachable or that run outside 25.12-26.9 are likely not affected; the sources do not give further detail.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91377")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.