Siebel CRM Integration CVE-2026-87339

Exploitation requires human interaction from a person other than the attacker (UI:R) - a victim must be lured into interacting with attacker-supplied content - and the flaw is explicitly 'difficult to exploit' (AC:H), implying specific non-default timing/state conditions must align. The target is the REST component of Siebel CRM Integration (versions 17.0-26.9). No authentication is required (PR:N, unauthenticated, per the provided CVSS vector), and the attack is deliverable remotely over HTTP (AV:N). Limiting factors: the mandatory victim interaction, the high attack complexity, and the restriction to read access of only a subset of accessible data (C:L; no write or availability impact) sharply constrain real-world impact.

All signals point to a low-priority issue. The vendor-supplied CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) yields a base score of 3.1 (Low): although the attack vector is network and no authentication is required (PR:N), high attack complexity (AC:H) and required user interaction (UI:R) substantially raise the bar, and impact is limited to unauthorized read access to a subset of data (C:L only, no integrity or availability impact). No EPSS score, CISA KEV listing, or public POC is present in the provided data, so there is no public exploit identified at time of analysis and no evidence of active exploitation. The SSVC dimensions cannot be fully populated (no automatable/exploitation-status fields supplied), but the combination of AC:H plus UI:R makes automation unlikely and technical impact is partial at most. Conflicting signal to note: the input Tag 'Authentication Bypass' does not match the description, which describes a low-severity confidentiality-only information disclosure requiring victim interaction, not an authentication bypass - the tag should not drive prioritization. This is a genuinely low-risk, low-urgency item suitable for routine patching during the next maintenance window.

An attacker crafts a malicious HTTP request or link targeting the REST component of Siebel CRM Integration and lures a legitimate user (a person other than the attacker) into interacting with it. If the difficult-to-satisfy conditions align, the interaction causes the application to disclose a limited subset of Siebel CRM Integration data back to the attacker. No public exploit is identified at time of analysis, and the high complexity plus required user interaction make opportunistic exploitation impractical.