Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-91434 EUVD-2026-106684GHSA-fcj2-j3x3-mxw7

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are aff…

Published Oct 20, 2026 · Updated Oct 23, 2026 · Assigned by oracle

Description

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Affected products

VendorProductAffectedFixed
Oracle Siebel CRM Deployment 17.0 – ≤ 26.9 —

Advisories 1

References