cbcvebase.

Oracle Siebel Crm vulnerabilities

154 known vulnerabilities affecting oracle/siebel_crm.

Total CVEs
154
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL13HIGH54MEDIUM74LOW13

Vulnerabilities

Page 4 of 8
CVE-2026-62454P3HIGHCVSS 7.8≥ 22.3, ≤ 26.62026-08-18
CVE-2026-62454 [HIGH] CWE-284 CVE-2026-62454: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications.
nvd
CVE-2026-60753P3HIGHCVSS 7.8≥ 17.0, ≤ 26.62026-08-18
CVE-2026-60753 [HIGH] CWE-284 CVE-2026-60753: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulner
nvd
CVE-2026-46888P3HIGHCVSS 7.8≥ 17.0, ≤ 26.52026-06-17
CVE-2026-46888 [HIGH] CWE-284 CVE-2026-46888: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this
nvd
CVE-2026-62594P3HIGHCVSS 7.7≥ 25.12, ≤ 26.62026-08-18
CVE-2026-62594 [HIGH] CWE-284 CVE-2026-62594: Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integratio Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Integration. While the vulnerability is in Siebel CRM Integration, attacks
nvd
CVE-2026-62587P3HIGHCVSS 7.1≥ 25.12, ≤ 26.62026-08-18
CVE-2026-62587 [HIGH] CWE-284 CVE-2026-62587: Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archiva Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Administration. Successful attacks of this vulnerability can result in unautho
nvd
CVE-2026-60705P3HIGHCVSS 7.0≥ 22.3, ≤ 26.52026-07-21
CVE-2026-60705 [HIGH] CWE-200 CVE-2026-60705: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can
nvd
CVE-2026-73965P3MEDIUMCVSS 6.8≥ 17.0, ≤ 26.72026-09-15
CVE-2026-73965 [MEDIUM] CWE-284 CVE-2026-73965: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized
nvd
CVE-2026-61339P3HIGHCVSS 7.3≥ 22.3, ≤ 26.62026-08-18
CVE-2026-61339 [HIGH] CWE-284 CVE-2026-61339: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications.
nvd
CVE-2023-21909P3MEDIUMCVSS 6.5≤ 23.32023-04-18
CVE-2023-21909 [MEDIUM] CVE-2023-21909: Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported v Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported versions that are affected are 23.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized access to critical data or c
nvd
CVE-2026-83077P3MEDIUMCVSS 6.4≥ 22.3, ≤ 26.72026-09-15
CVE-2026-83077 [MEDIUM] CWE-284 CVE-2026-83077: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud
nvd
CVE-2021-2368P3MEDIUMCVSS 5.9≤ 21.52021-07-21
CVE-2021-2368 [MEDIUM] CVE-2021-2368: Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: Siebel Core - Server Infras Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: Siebel Core - Server Infrastructure). Supported versions that are affected are 21.5 and Prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM. Successful attacks of this vulnerability can result in unauthorized ac
nvd
CVE-2013-5835P4MEDIUMCVSS 6.8v8.1.1v8.2.22013-10-16
CVE-2013-5835 [MEDIUM] CVE-2013-5835: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Open_UI.
nvd
CVE-2012-1731P4MEDIUMCVSS 6.8v8.1.1v8.2.22012-07-17
CVE-2012-1731 [MEDIUM] CVE-2012-1731: Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect con Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.
nvd
CVE-2026-60712P4MEDIUMCVSS 6.5≥ 22.3, ≤ 26.52026-07-21
CVE-2026-60712 [MEDIUM] CWE-306 CVE-2026-60712: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Application
nvd
CVE-2025-30758P4MEDIUMCVSS 5.3≥ 25.0, ≤ 25.52025-07-15
CVE-2025-30758 [MEDIUM] CWE-200 CVE-2025-30758: Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions that are affected are 25.0-25.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized read
nvd
CVE-2012-1728P4MEDIUMCVSS 5.8v8.1.1v8.2.22012-07-17
CVE-2012-1728 [MEDIUM] CVE-2012-1728: Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Portal Framework.
nvd
CVE-2015-0366P4MEDIUMCVSS 5.0v8.1.1v8.2.22015-01-21
CVE-2015-0366 [MEDIUM] CVE-2015-0366: Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 al Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2014-0369.
nvd
CVE-2014-0369P4MEDIUMCVSS 5.0v8.1.1v8.2.22014-01-15
CVE-2014-0369 [MEDIUM] CVE-2014-0369: Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 al Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2015-0366.
nvd
CVE-2013-1551P4MEDIUMCVSS 6.0v8.1.1v8.2.22013-04-17
CVE-2013-1551 [MEDIUM] CVE-2013-1551: Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebe Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Integration Business Services.
nvd
CVE-2013-5761P4MEDIUMCVSS 5.8v8.1.1v8.2.22013-10-16
CVE-2013-5761 [MEDIUM] CVE-2013-5761: Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Integration - Scripting.
nvd
Oracle Siebel Crm vulnerabilities | cvebase