Unauthenticated Network Access Vulnerability in Oracle Siebel CRM Integration
CVE-2026-60797

7.4HIGH

Key Information:

Vendor

Oracle
Status
Siebel Crm Integration
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60797?

An unauthenticated access vulnerability exists within the Siebel CRM Integration product of Oracle Siebel CRM, specifically in the REST component. This flaw affects supported versions 17.0 through 26.6 and allows an attacker with network access via HTTPS to potentially compromise the system. The exploitation of this vulnerability enables unauthorized users to create, delete, or modify critical data, posing serious risks to the integrity and confidentiality of information within the Siebel CRM Integration. Organizations utilizing affected versions should promptly apply the recommended security measures to mitigate this risk.

Affected Version(s)

Siebel CRM Integration 17.0 <= 26.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.