Live › vulnerability › CVE-2026-91412
Go to dashboardOracle Siebel CRM End User has a flaw in its Open UI component that lets a low-privileged user reach data over HTTP. A successful attack gives the attacker unauthorized read access to critical data accessible to the End User application.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organisations running Oracle Siebel CRM End User in the affected version range 17.0-26.9 with the Open UI component reachable over HTTP. The sources do not describe the configuration needed beyond a low-privileged account, so teams not running Siebel CRM End User can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM End User accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91412")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.