Oracle Siebel CRM: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 121

• Critical 9.9
  CVE-2026-101446

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Critical 9.1
  CVE-2026-59083

  Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

  Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from …

  Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu
  Jul 14, 2026
• High 8.8
  CVE-2026-101457

  Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versio…

  Oracle Siebel Apps - Life Sciences
  Oct 20, 2026
• High 8.8
  CVE-2026-101495

  Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supporte…

  Oracle Siebel CRM Development
  Oct 20, 2026
• High 8.8
  CVE-2026-91442

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 8.7
  CVE-2026-101451

  Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are…

  Oracle Siebel Life Sciences
  Oct 20, 2026
• High 8.7
  CVE-2026-91437

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 8.3
  CVE-2026-101459

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 8.2
  CVE-2026-101458

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 8.2
  CVE-2026-91445

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard). Supp…

  Oracle Siebel CRM End User
  Oct 20, 2026
• High 8.1
  CVE-2026-54512 Public exploit

  jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

  jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymor…

  FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Jun 23, 2026
• High 8.1
  CVE-2026-54513

  jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

  jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only…

  FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Jun 23, 2026
• High 8.0
  CVE-2026-101438

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• High 7.8
  CVE-2026-11332

  Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

  A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git con…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux PyPI
  Jun 5, 2026
• High 7.5
  CVE-2026-101460

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 7.5
  CVE-2026-101461

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 7.5
  CVE-2026-101463

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that…

  Oracle Siebel CRM End User
  Oct 20, 2026
• High 7.5
  CVE-2026-101468

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions …

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 7.5
  CVE-2026-101508

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are …

  Oracle Siebel CRM Integration
  Oct 20, 2026
• High 7.5
  CVE-2026-50010

  Netty's wrapping plain trust manager silently disables hostname verification

  Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustManager in X…

  netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Jun 12, 2026
• High 7.5
  CVE-2026-91377

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versi…

  Oracle Siebel CRM Integration
  Oct 20, 2026
• High 7.5
  CVE-2026-91447

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 7.5
  CVE-2026-91448

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 7.4
  CVE-2026-101467

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). Supported versions…

  Oracle Siebel CRM End User
  Oct 20, 2026
• High 7.4
  CVE-2026-91449

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 7.4
  CVE-2026-91450

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 7.3
  CVE-2026-40542

  Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification

  Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. Users are recommended to upgrade to version 5.6.1, which fixes th…

  Apache Software Foundation Apache HttpClient trino-plugin-lakehouse trino-plugin-pinot Ubuntu Wolfi Maven
  Apr 22, 2026
• High 7.2
  CVE-2026-44161

  Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

  Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out_http output plugin allows placeholders such as ${tag} in the endpoint configuration parameter, and if a pl…

  fluent fluentd kube-fluentd-operator ruby3.4-kube-logging-operator-fluentd-outputs Wolfi RubyGems
  Jul 8, 2026
• High 7.2
  CVE-2026-91433

  Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer). Supported vers…

  Oracle Siebel Apps - Field Service
  Oct 20, 2026
• High 7.1
  CVE-2026-101447

  Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that…

  Oracle Siebel CRM Development
  Oct 20, 2026
• High 7.1
  CVE-2026-101464

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• High 7.1
  CVE-2026-91438

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.9
  CVE-2026-34480

  Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters

  Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/#charsets producing invali…

  Apache Software Foundation Apache Log4j Core druid airflow-3 Debian Ubuntu Wolfi Maven
  Apr 10, 2026
• Medium 6.9
  CVE-2026-87338

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are …

  Oracle Siebel CRM Integration
  Oct 20, 2026
• Medium 6.8
  CVE-2026-91364

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 6.7
  CVE-2026-101453

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.7
  CVE-2026-91434

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.7
  CVE-2026-91444

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.7
  CVE-2026-91446

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.6
  CVE-2026-101437

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 6.5
  CVE-2025-61728

  Excessive CPU consumption when building archive index in archive/zip

  archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.

  Go standard library archive/zip katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jan 28, 2026
• Medium 6.5
  CVE-2026-101443

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 6.5
  CVE-2026-59889

  jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization

  jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, UnwrappedPropertyHandler.processUnwrapped() replays buffered JSON for a @JsonUnwrap…

  FasterXML jackson-databind druid thingsboard-tb-node Ubuntu Wolfi Maven
  Jul 14, 2026
• Medium 6.5
  CVE-2026-91360

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91367

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91412

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91420

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91429

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91430

  Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Sup…

  Oracle Siebel Apps - Financial Services
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91432

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91435

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91440

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91441

  Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management)…

  Oracle Siebel Apps - Customer Order Management
  Oct 20, 2026
• Medium 6.5
  CVE-2026-91443

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.4
  CVE-2026-91424

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.3
  CVE-2026-101455

  Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supporte…

  Oracle Siebel CRM Development
  Oct 20, 2026
• Medium 6.3
  CVE-2026-101465

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 6.1
  CVE-2026-101391

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 6.1
  CVE-2026-101395

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 6.1
  CVE-2026-101408

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versi…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 6.1
  CVE-2026-101454

  Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported ve…

  Oracle Siebel CRM Development
  Oct 20, 2026
• Medium 6.1
  CVE-2026-91378

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versi…

  Oracle Siebel CRM Integration
  Oct 20, 2026
• Medium 6.0
  CVE-2026-101456

  Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported ve…

  Oracle Siebel CRM Development
  Oct 20, 2026
• Medium 6.0
  CVE-2026-91413

  Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supporte…

  Oracle Siebel CRM Development
  Oct 20, 2026
• Medium 6.0
  CVE-2026-91423

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 5.9
  CVE-2026-101403

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versi…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 5.9
  CVE-2026-101439

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.9
  CVE-2026-101440

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.9
  CVE-2026-91365

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.9
  CVE-2026-91421

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 5.8
  CVE-2026-91371

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.5
  CVE-2026-101392

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 5.5
  CVE-2026-101444

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.5
  CVE-2026-101462

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 5.5
  CVE-2026-91426

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 5.5
  CVE-2026-91431

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Medium 5.5
  CVE-2026-91439

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 5.4
  CVE-2026-91387

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Medium 5.4
  CVE-2026-91389

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Medium 5.4
  CVE-2026-91390

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Medium 5.3
  CVE-2026-101394

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 5.3
  CVE-2026-101399

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 5.3
  CVE-2026-101441

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.3
  CVE-2026-101448

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Support…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 5.3
  CVE-2026-41853

  Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux

  Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.

  Spring Spring Framework libspring-java libspring-java Debian Ubuntu Wolfi Maven
  Jun 9, 2026
• Medium 5.3
  CVE-2026-8384

  Eclipse Jetty: Path parameter traversal

  In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it…

  Eclipse Foundation Eclipse Jetty druid trino Debian Ubuntu Wolfi Maven
  Jul 14, 2026
• Medium 5.3
  CVE-2026-91359

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91361

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91362

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91369

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91370

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91414

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 5.3
  CVE-2026-91422

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Medium 4.8
  CVE-2026-101405

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 4.7
  CVE-2026-101396

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 4.7
  CVE-2026-101492

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versi…

  Oracle Siebel CRM Integration
  Oct 20, 2026
• Medium 4.7
  CVE-2026-91366

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 4.7
  CVE-2026-91388

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Medium 4.3
  CVE-2026-101393

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 4.3
  CVE-2026-101476

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Medium 4.3
  CVE-2026-91428

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Medium 4.1
  CVE-2026-101436

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Medium 4.1
  CVE-2026-91368

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Low 3.9
  CVE-2026-101404

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Low 3.9
  CVE-2026-91436

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Low 3.7
  CVE-2026-101402

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versi…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Low 3.7
  CVE-2026-101406

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Low 3.7
  CVE-2026-91363

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Low 3.7
  CVE-2026-91391

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Low 3.7
  CVE-2026-91392

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Low 3.6
  CVE-2026-101445

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Low 3.3
  CVE-2026-91372

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Low 3.1
  CVE-2026-101442

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

  Oracle Siebel CRM Cloud Applications
  Oct 20, 2026
• Low 3.1
  CVE-2026-87339

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are…

  Oracle Siebel CRM Integration
  Oct 20, 2026
• Low 3.1
  CVE-2026-91393

  Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

  Oracle Siebel CRM End User
  Oct 20, 2026
• Low 2.9
  CVE-2026-101400

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Low 2.9
  CVE-2026-101401

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Low 2.4
  CVE-2026-101449

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Support…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Low 2.3
  CVE-2026-91427

  Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

  Oracle Siebel CRM Deployment
  Oct 20, 2026
• Low 2.2
  CVE-2026-101397

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Oct 20, 2026
• Low 2.1
  CVE-2026-54906

  concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

  concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock he…

  ruby-concurrency concurrent-ruby logstash-9.3 logstash-9.3-iamguarded-compat Debian Ubuntu Azure Linux Wolfi RubyGems
  Jun 24, 2026

Revision history

1. 2026-10-20 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - October 2026 - Appendix Oracle Siebel CRM vom 2026-10-20
  https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixSECR