Skip to content
OracleCVE-2026-62454

Siebel CRM Cloud Applications: takeover via Siebel Cloud Manager

High7.8CVE-2026-62454 · Published Aug 18, 2026 · updated Sep 1, 2026

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Oracle advisory

Affected versions

PackageAffectedFixed in
Siebel CRM Cloud Applications
Product
>= 22.3, <= 26.6No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More Oracle advisories

All Oracle
Advisory
Helidon: data tampering via Imperative Web Server
High8.6Aug 18
Helidon: data tampering via Imperative Web Server
Critical9.9Aug 18
Helidon: data tampering via Imperative Web Server
High8.3Aug 18
Helidon: flaw in Imperative Web Server
Medium5.3Aug 18
Helidon: data tampering via Imperative Web Server
High7.3Aug 18
Helidon: denial of service via Imperative Web Server
High7.5Aug 18

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.