CVE-2026-91447

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment) affecting versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful exploitation may lead to unautho...

CVE-2026-91445

A vulnerability exists in the Communications Panel/Dashboard component of the Siebel CRM End User product (Oracle Siebel CRM), affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploi...

CVE-2026-91443

A vulnerability exists in the Server Infrastructure component of the Oracle Siebel CRM Deployment product, affecting supported versions 17.0-26.9 . This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the deployment, potentially resulti...

CVE-2026-91441

A vulnerability exists in the Order Management component of Oracle Siebel CRM (Siebel Apps - Customer Order Management) affecting versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this issue, though successful execution requires human interaction . The vulner...

CVE-2026-91442

A vulnerability exists in the Server Infrastructure component of the Oracle Siebel CRM Deployment product, affecting supported versions 17.0-26.9 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the deployment, potentially leading to a com...

CVE-2026-91438

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment product), affecting supported versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful exploitation ma...

CVE-2026-91440

A vulnerability exists in the Siebel CRM Deployment product (component: Server Infrastructure ) within Oracle Siebel CRM , affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful exploi...

CVE-2026-91435

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can exploit this flaw to cause a hang or frequently repeatable crash , resulting in a complete Denial of Service (Do...

CVE-2026-91437

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (supported versions 17.0-26.9 ). A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment, potentially gaining unauthorized access to, or modification of...

CVE-2026-91432

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (versions 17.0-26.9 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read access to a subset of a...

CVE-2026-91433

The Siebel Apps - Field Service product of Oracle Siebel CRM, specifically the Smart Answer component, is vulnerable in versions 17.0-26.9 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation can lead to a compl...

CVE-2026-91430

A vulnerability exists in the Financial Accounts component of Oracle Siebel CRM (Siebel Apps - Financial Services) affecting versions 17.0-26.9 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation may lead...

CVE-2026-91429

The Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ) is vulnerable in supported versions 17.0-26.9 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the deployment. Successful exploitation can...

CVE-2026-91428

The Siebel CRM End User product (component: Open UI ) in Oracle Siebel CRM, versions 17.0-26.9 , is vulnerable to an easily exploitable flaw. An unauthenticated attacker with network access via HTTP can compromise the system, though successful exploitation requires human interaction . This vulner...

CVE-2026-91424

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ) affecting supported versions 17.0-26.9 . A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the deployment. Su...

CVE-2026-91422

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment product), affecting versions 17.0-26.9 . A low privileged attacker with network access via HTTP could exploit this difficulty-to-exploit vulnerability to compromise the deployment. Successful...

CVE-2026-91421

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (specifically the Siebel CRM Deployment product) affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to cause a hang...

CVE-2026-91420

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure ) affecting supported versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment. Successful exploitation may lead...

CVE-2026-91419

The Oracle HTTP Server product of Oracle Fusion Middleware (specifically the OSSL Module ) is affected by a vulnerability in version 12.2.1.4.0 . A low-privileged attacker with access to the infrastructure where the server executes can easily exploit this flaw to compromise and potentially take o...

CVE-2026-91414

A vulnerability exists in the Server Infrastructure component of the Oracle Siebel CRM Deployment product (versions 17.0-26.9 ). This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the deployment, provided they can induce human interact...