Siebel Artificial Intelligence
Monthly
Unauthorized data exfiltration and limited data manipulation in Oracle Siebel Artificial Intelligence (versions 25.12 through 26.6) is achievable by any low-privileged, network-adjacent attacker over HTTP, with no user interaction required. Oracle's own advisory classifies this as 'easily exploitable,' and the scope change metric confirms that successful exploitation can cascade beyond the AI component to impact additional Siebel CRM products. No public exploit or CISA KEV listing has been identified at time of analysis, though the low exploitation complexity and broad confidentiality impact (C:H) make this a high-priority patching target for Oracle Siebel deployments.
Unauthorized data exfiltration and limited data manipulation in Oracle Siebel Artificial Intelligence (versions 25.12 through 26.6) is achievable by any low-privileged, network-adjacent attacker over HTTP, with no user interaction required. Oracle's own advisory classifies this as 'easily exploitable,' and the scope change metric confirms that successful exploitation can cascade beyond the AI component to impact additional Siebel CRM products. No public exploit or CISA KEV listing has been identified at time of analysis, though the low exploitation complexity and broad confidentiality impact (C:H) make this a high-priority patching target for Oracle Siebel deployments.