Oracle Siebel Server <= 26.8 (October 2026 CPU)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(370447);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/22");

  script_cve_id(
    "CVE-2023-35116",
    "CVE-2024-6763",
    "CVE-2025-61728",
    "CVE-2026-10051",
    "CVE-2026-101391",
    "CVE-2026-101392",
    "CVE-2026-101393",
    "CVE-2026-101394",
    "CVE-2026-101395",
    "CVE-2026-101396",
    "CVE-2026-101397",
    "CVE-2026-101399",
    "CVE-2026-101400",
    "CVE-2026-101401",
    "CVE-2026-101402",
    "CVE-2026-101403",
    "CVE-2026-101404",
    "CVE-2026-101405",
    "CVE-2026-101406",
    "CVE-2026-101408",
    "CVE-2026-101436",
    "CVE-2026-101437",
    "CVE-2026-101438",
    "CVE-2026-101439",
    "CVE-2026-101440",
    "CVE-2026-101441",
    "CVE-2026-101442",
    "CVE-2026-101443",
    "CVE-2026-101444",
    "CVE-2026-101445",
    "CVE-2026-101446",
    "CVE-2026-101447",
    "CVE-2026-101448",
    "CVE-2026-101449",
    "CVE-2026-101451",
    "CVE-2026-101453",
    "CVE-2026-101454",
    "CVE-2026-101455",
    "CVE-2026-101456",
    "CVE-2026-101457",
    "CVE-2026-101458",
    "CVE-2026-101459",
    "CVE-2026-101460",
    "CVE-2026-101461",
    "CVE-2026-101462",
    "CVE-2026-101463",
    "CVE-2026-101464",
    "CVE-2026-101465",
    "CVE-2026-101467",
    "CVE-2026-101468",
    "CVE-2026-101476",
    "CVE-2026-101492",
    "CVE-2026-101495",
    "CVE-2026-101508",
    "CVE-2026-11332",
    "CVE-2026-22746",
    "CVE-2026-22751",
    "CVE-2026-2332",
    "CVE-2026-24733",
    "CVE-2026-34477",
    "CVE-2026-34478",
    "CVE-2026-34480",
    "CVE-2026-40542",
    "CVE-2026-41284",
    "CVE-2026-41853",
    "CVE-2026-42583",
    "CVE-2026-43513",
    "CVE-2026-43515",
    "CVE-2026-44161",
    "CVE-2026-44249",
    "CVE-2026-45416",
    "CVE-2026-50010",
    "CVE-2026-50229",
    "CVE-2026-54512",
    "CVE-2026-54513",
    "CVE-2026-54514",
    "CVE-2026-54515",
    "CVE-2026-54516",
    "CVE-2026-54517",
    "CVE-2026-54518",
    "CVE-2026-54906",
    "CVE-2026-55276",
    "CVE-2026-59083",
    "CVE-2026-59888",
    "CVE-2026-59889",
    "CVE-2026-6790",
    "CVE-2026-71497",
    "CVE-2026-75140",
    "CVE-2026-8384",
    "CVE-2026-87338",
    "CVE-2026-87339",
    "CVE-2026-91359",
    "CVE-2026-91360",
    "CVE-2026-91361",
    "CVE-2026-91362",
    "CVE-2026-91363",
    "CVE-2026-91364",
    "CVE-2026-91365",
    "CVE-2026-91366",
    "CVE-2026-91367",
    "CVE-2026-91368",
    "CVE-2026-91369",
    "CVE-2026-91370",
    "CVE-2026-91371",
    "CVE-2026-91372",
    "CVE-2026-91377",
    "CVE-2026-91378",
    "CVE-2026-91387",
    "CVE-2026-91388",
    "CVE-2026-91389",
    "CVE-2026-91390",
    "CVE-2026-91391",
    "CVE-2026-91392",
    "CVE-2026-91393",
    "CVE-2026-91412",
    "CVE-2026-91413",
    "CVE-2026-91414",
    "CVE-2026-91420",
    "CVE-2026-91421",
    "CVE-2026-91422",
    "CVE-2026-91423",
    "CVE-2026-91424",
    "CVE-2026-91425",
    "CVE-2026-91426",
    "CVE-2026-91427",
    "CVE-2026-91428",
    "CVE-2026-91429",
    "CVE-2026-91430",
    "CVE-2026-91431",
    "CVE-2026-91432",
    "CVE-2026-91433",
    "CVE-2026-91434",
    "CVE-2026-91435",
    "CVE-2026-91436",
    "CVE-2026-91437",
    "CVE-2026-91438",
    "CVE-2026-91439",
    "CVE-2026-91440",
    "CVE-2026-91441",
    "CVE-2026-91442",
    "CVE-2026-91443",
    "CVE-2026-91444",
    "CVE-2026-91445",
    "CVE-2026-91446",
    "CVE-2026-91447",
    "CVE-2026-91448",
    "CVE-2026-91449",
    "CVE-2026-91450"
  );

  script_name(english:"Oracle Siebel Server <= 26.8 (October 2026 CPU)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by multiple vulnerabilities");
  script_set_attribute(attribute:"description", value:
"The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in
the October 2026 CPU advisory.

  - Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud
    Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low
    privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the
    vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products
    (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud
    Applications. (CVE-2026-101446)

  - Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI (Ruby)).
    Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows
    unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful
    attacks of this vulnerability can result in takeover of Siebel CRM End User. (CVE-2026-54906)

  - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface
    (Apache Tomcat)). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability
    allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.
    Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification
    access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to
    critical data or complete access to all Siebel CRM Deployment accessible data. (CVE-2026-24733,
    CVE-2026-41284, CVE-2026-43513, CVE-2026-43515, CVE-2026-59083)

  - Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).
    Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged
    attacker with network access via SQL to compromise Siebel Apps - Life Sciences. Successful attacks of this
    vulnerability can result in takeover of Siebel Apps - Life Sciences. (CVE-2026-101457)

  - Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval
    Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows
    unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful
    attacks require human interaction from a person other than the attacker. Successful attacks of this
    vulnerability can result in takeover of Siebel CRM Development. (CVE-2026-101495)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/docs/tech/security-alerts/cpuoct2026csaf.json");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/security-alerts/cpuoct2026.html");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Oracle Siebel CRM 26.9 or later, according to the October 2026 Oracle Critical Patch Update advisory.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-54906");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2026-101446");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/10/20");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/10/20");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/22");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:siebel_crm");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("oracle_siebel_server_installed.nbin");
  script_require_keys("installed_sw/Oracle Siebel Server");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Oracle Siebel Server', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'min_version': '17.0', 'max_version': '26.8', 'fixed_version': '26.9'}
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:result);