EUVD-2026-79568
GHSA-g9vw-mxf7-hvvm
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Requires an existing local logon on the Siebel Deployment host, so AV:L and PR:L; low complexity and no user interaction, with full C/I/A impact on the component.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
AnalysisAI
A local privilege-escalation flaw in the Siebel CRM Deployment component (Server Infrastructure) lets a low-privileged user who can log on to the host where Siebel CRM Deployment runs take full control of that deployment. All supported releases from 17.0 through 26.7 are affected, with a CVSS 3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N, high confidentiality, integrity and availability impact). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an attacker to possess a low-privileged account with the ability to log on locally to the infrastructure host where the Siebel CRM Deployment component executes - the CVSS vector's AV:L and PR:L reflect exactly this precondition, and Oracle describes the actor as 'low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes'. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 3.1 rates this 7.8 with AV:L/PR:L/UI:N, meaning exploitation requires an attacker to already hold a low-privileged interactive logon on the Siebel Deployment host - a meaningful precondition that caps this below a network-reachable, unauthenticated flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix from Oracle's Critical Security Patch Update advisory at https://www.oracle.com/security-alerts/cspusep2026.html - Oracle CPUs are cumulative by release train, so install the latest patch set applicable to your Siebel 17.0-26.7 branch (the specific patch version is not stated in the supplied data and must be read from that advisory; do not assume a version number). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today