Vulnerability in Oracle Siebel CRM Server Infrastructure Affects Data Security
CVE-2026-60792

7.4HIGH

Key Information:

Vendor

Oracle
Status
Siebel Crm Deployment
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60792?

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment, affecting versions 17.0 to 26.6. The flaw poses a risk of unauthorized access, where an unauthenticated attacker with network access via HTTP could potentially compromise Siebel CRM Deployment. This can lead to the unauthorized creation, deletion, or modification of critical data, resulting in serious security implications. The attack does not require prior authentication and can enable attackers to gain extensive access to sensitive CRM data.

Affected Version(s)

Siebel CRM Deployment 17.0 <= 26.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.