Unauthenticated Access Vulnerability in Oracle Siebel CRM Search Component
CVE-2026-60757

8.1HIGH

Key Information:

Vendor

Oracle
Status
Siebel Crm End User
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60757?

A vulnerability in the Search component of Oracle Siebel CRM End User allows unauthenticated attackers with network access to compromise the application. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data. This issue highlights the importance of securing the physical communication segment tied to the Siebel environment to prevent unauthorized manipulation of sensitive information.

Affected Version(s)

Siebel CRM End User 17.0 <= 26.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.