CVE-2026-101462

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (supported versions 17.0-26.9 ). A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the deployment, potentially gaining unauthorized access to critical ...

CVE-2026-101459

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment. Successful exploitation may r...

CVE-2026-101454

A vulnerability exists in the Configuration Tools component of Oracle Siebel CRM (Siebel CRM Development product), affecting supported versions 17.0-26.9 . A low-privileged attacker with infrastructure access can exploit this flaw to compromise the product. Successful exploitation may lead to una...

CVE-2026-101444

The Siebel Cloud Manager component within Oracle Siebel CRM Cloud Applications (supported versions 22.3-26.9 ) is vulnerable to a flaw that allows a low-privileged attacker with infrastructure access to compromise the application. Successful exploitation can lead to unauthorized access to critica...

CVE-2026-101443

A vulnerability exists in the Siebel Cloud Manager component of the Oracle Siebel CRM Cloud Applications product, affecting versions 22.3-26.9 . A low-privileged attacker with network access via LDAP can exploit this flaw to compromise the application. Successful exploitation may lead to unauthor...

CVE-2026-101441

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9). This difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment of the hardware to compromise the application. Su...

CVE-2026-101437

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the applications, potentially impacting additional ...

CVE-2026-101435

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to a complete Denial ...

CVE-2026-101434

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, specifically the Database Server component in versions 8.61-8.63 , is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fro...

CVE-2026-101427

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, though successful exploitation requires hu...

CVE-2026-101414

The Oracle PeopleSoft Enterprise PeopleTools product, specifically the Porting component in versions 8.61-8.63 , is affected by a vulnerability that allows an unauthenticated attacker with infrastructure access to compromise the software. The root cause is not explicitly detailed, but a successfu...

CVE-2026-101412

A vulnerability exists in the Analytic Server component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63). This high-complexity vulnerability allows a low privileged attacker with infrastructure access to compromise the software. Successful exploitation can lead to unautho...

CVE-2026-101408

A vulnerability exists in the Email Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting versions 17.0-26.9 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires h...

CVE-2026-101396

A vulnerability exists in the Siebel Apps - Marketing component of Oracle Siebel CRM , specifically affecting supported versions 17.0-26.9 . A low-privileged attacker with local infrastructure access can exploit this difficult-to-exploit vulnerability to compromise the product. Successful exploit...

CVE-2026-101395

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can compromise the system, provided they can trigger human interaction from a user. The impact includes unaut...

CVE-2026-101393

A vulnerability exists in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing ) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, provided there is human interactio...

CVE-2026-101394

The Siebel Apps - Marketing component of Oracle Siebel CRM (versions 17.0-26.9 ) is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized update, insert, or delete access to certain acce...

CVE-2026-101391

The Siebel Apps - Marketing component of Oracle Siebel CRM (versions 17.0-26.9 ) is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and may result in a ...

CVE-2026-101385

A vulnerability exists in the Oracle REST Data Services (Core component) affecting supported versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Successful exploitation may result in unauthorized creation, deletion, or ...

CVE-2026-101383

A vulnerability exists in the Core component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). An unauthenticated attacker with network access via HTTP can compromise the service, though successful exploitation requires human interaction from a person other than the attacker. The i...