Vulnerability in Configuration Management of Oracle Enterprise Manager for Siebel
CVE-2026-101525

8.8HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-101525?

A vulnerability exists in Oracle Enterprise Manager for Siebel, specifically within its Configuration Management component. This weakness can be exploited by low-privileged attackers who have network access via HTTP. Successful exploitation could lead to unauthorized takeover of the Oracle Enterprise Manager for Siebel. The supported versions vulnerable to this threat are 13.5 and 24.1, thereby presenting a significant risk to organizations relying on these versions. For further details, refer to the Oracle Advisory.

Affected Version(s)

Oracle Enterprise Manager for Siebel 13.5

Oracle Enterprise Manager for Siebel 24.1

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.