Siebel Crm Deployment
Monthly
Local privilege escalation in Oracle Siebel CRM Deployment (versions 17.0 through 26.6) allows a low-privileged local attacker to achieve full takeover of the affected installation, impacting confidentiality, integrity, and availability. The attack targets the Installation component and requires only logon access to the host infrastructure - no remote vector or user interaction is involved. No public exploit code and no active exploitation have been identified at time of analysis; however, the low attack complexity (AC:L) makes post-access exploitation straightforward.
Local privilege escalation in Oracle Siebel CRM Deployment (Database Upgrade component) versions 17.0 through 26.5 allows a low-privileged user with logon access to the host running the deployment to fully compromise the Siebel CRM Deployment instance. The flaw carries a CVSS 3.1 base score of 7.8 with high impact across confidentiality, integrity, and availability, and was disclosed in the Oracle Critical Patch Update advisory (cspujun2026). No public exploit identified at time of analysis and no EPSS or KEV signal was provided.
Unauthorized partial data read in Oracle Siebel CRM Deployment (Application Interface component) is achievable by low-privileged, network-adjacent authenticated attackers over HTTP across versions 17.0 through 26.4. Exploitation is difficult due to high attack complexity and a mandatory human-interaction requirement, limiting exposure to targeted scenarios rather than opportunistic mass exploitation. No public exploit code or active exploitation has been identified at time of analysis; the low CVSS score of 2.6 reflects the constrained, confidentiality-only impact.
Local privilege escalation in Oracle Siebel CRM Deployment (versions 17.0 through 26.6) allows a low-privileged local attacker to achieve full takeover of the affected installation, impacting confidentiality, integrity, and availability. The attack targets the Installation component and requires only logon access to the host infrastructure - no remote vector or user interaction is involved. No public exploit code and no active exploitation have been identified at time of analysis; however, the low attack complexity (AC:L) makes post-access exploitation straightforward.
Local privilege escalation in Oracle Siebel CRM Deployment (Database Upgrade component) versions 17.0 through 26.5 allows a low-privileged user with logon access to the host running the deployment to fully compromise the Siebel CRM Deployment instance. The flaw carries a CVSS 3.1 base score of 7.8 with high impact across confidentiality, integrity, and availability, and was disclosed in the Oracle Critical Patch Update advisory (cspujun2026). No public exploit identified at time of analysis and no EPSS or KEV signal was provided.
Unauthorized partial data read in Oracle Siebel CRM Deployment (Application Interface component) is achievable by low-privileged, network-adjacent authenticated attackers over HTTP across versions 17.0 through 26.4. Exploitation is difficult due to high attack complexity and a mandatory human-interaction requirement, limiting exposure to targeted scenarios rather than opportunistic mass exploitation. No public exploit code or active exploitation has been identified at time of analysis; the low CVSS score of 2.6 reflects the constrained, confidentiality-only impact.