EUVD-2026-79561
GHSA-f27x-8xpr-53xw
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
HTTP-reachable and low complexity (AV:N/AC:L) but requires a valid low-privileged account, so PR:L with no user interaction; full C/I/A impact.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
AnalysisAI
A low-privileged, authenticated attacker with HTTP access to the Workflow component of Oracle Siebel CRM Development can fully take over the affected deployment, with high impact to confidentiality, integrity and availability (CVSS 3.1 base 8.8). All supported Siebel CRM Development releases from 17.0 through 26.7 are affected per Oracle and ENISA EUVD-2026-79561. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires (1) network reachability to the Siebel CRM Development HTTP interface and its Workflow component, and (2) a valid low-privileged account on that deployment (CVSS PR:L) - an anonymous, unauthenticated attacker cannot exploit this. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8) describes a remotely reachable, low-complexity, no-user-interaction flaw that only requires a low-privileged account, and the description's 'takeover of Siebel CRM Development' phrasing is consistent with the High/High/High impact triad - this is a serious authenticated-remote escalation, not a mere information leak. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix in Oracle's Critical Security Patch Update (cspusep2026.html, https://www.oracle.com/security-alerts/cspusep2026.html) - Oracle CPUs are cumulative, so install the current patch level for Siebel CRM Development for your release train (17.0 through 26.7) and confirm the Workflow component patch id before closing the ticket. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today