EUVD-2026-79573
GHSA-974f-m982-85hq
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
SOAP endpoint is network-reachable and needs no interaction, but valid low-privilege credentials are required (PR:L); confidentiality fully lost, integrity partially.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
AnalysisAI
Oracle Siebel CRM Integration (EAI component) versions 17.0 through 26.7 expose a network-reachable SOAP interface that fails to properly restrict operations for authenticated low-privileged users, letting an attacker read critical CRM data and perform limited unauthorized inserts, updates, or deletions. The flaw carries a CVSS 3.1 base score of 7.1 (AV:N/AC:L/PR:L/UI:N, C:H/I:L/A:N) and is rated 'easily exploitable' by the vendor, requiring only a valid low-privilege account and network reachability to the EAI endpoint. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires (1) network access to the Siebel CRM Integration EAI SOAP endpoint, whether over HTTPS from the internet or from a connected partner/internal network segment, and (2) a valid Siebel CRM account with low privileges and no administrative role, as reflected in the CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector describes a network-vector, low-complexity, low-privilege, no-interaction flaw with high confidentiality and low integrity impact, which is consistent with a broken-access-control issue in an integration service rather than a memory-corruption exploit - the attacker needs a foothold account but nothing else exotic. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Oracle Critical Security Patch Update referenced at https://www.oracle.com/security-alerts/cspusep2026.html and move Siebel CRM Integration to a patch level above 26.7 or to the specifically patched build identified in that advisory; Oracle CPU patches are cumulative, so applying the latest CPU for the deployed Siebel release line is the primary fix. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today