Vulnerability in Oracle Siebel CRM Integration REST Component
CVE-2026-60766

7.4HIGH

Key Information:

Vendor

Oracle
Status
Siebel Crm Integration
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60766?

A vulnerability exists in the REST component of Oracle Siebel CRM Integration, allowing unauthenticated attackers with network access through HTTPS to manipulate Siebel CRM data. This flaw may lead to unauthorized creation, deletion, or modification of critical data, enabling attackers to gain access to sensitive information that should be safeguarded. Organizations using the affected versions must implement necessary security measures to protect their data integrity and confidentiality.

Affected Version(s)

Siebel CRM Integration 17.0 <= 26.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.