Live › vulnerability › CVE-2026-91391
Go to dashboardOracle Siebel CRM End User, in the Open UI component, has a flaw that lets an unauthenticated attacker on the network send HTTP requests and read a subset of data the application can access. The attack is hard to carry out, and the CVSS 3.1 score is 3.7 with only confidentiality affected.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run Oracle Siebel CRM End User on supported versions 17.0 through 26.9 with the Open UI component reachable over HTTP are affected. Sites that do not run Siebel CRM End User can skip it.
No product ranges from the sources yet.
17.0 through 26.9Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM End User accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91391")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.