CVE-2026-46889

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - secalert_us@oracle.com

Published

2026-06-16

Last modified

2026-10-25

Weaknesses

CWE-284

Affected products

• Siebel Apps - Marketing (Oracle)

References

• https://www.oracle.com/security-alerts/cspujun2026.html