Live › vulnerability › CVE-2026-91430
Go to dashboardOracle Siebel Apps - Financial Services, in the Financial Accounts component, has a flaw that lets an unauthenticated attacker reach it over the network via HTTP. A successful attack can read critical data, often all data the app can access, and make some limited updates, inserts or deletes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments of Oracle Siebel Apps - Financial Services in the affected version range 17.0-26.9 that are reachable over HTTP from the network. Exploitation is rated difficult (high attack complexity), so it is not trivial, but no login is required. Teams not running Siebel Financial Services can skip it.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Financial Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Apps - Financial Services accessible data as well as unauthorized update, insert or delete access to some of Siebel Apps - Financial Services accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91430")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.