Vulnerabilities

Filters

1 selected

14 records

Sort

Advisory: Oracle Siebel CRM End User — oracle.com/security-alerts/cpuoct2026.html Clear all filters

TI-2026-77500 CVE-2026-91445 · GHSA-2hr4-6w45-xwrh

Missing authentication in Oracle Siebel CRM End User exposes data

MEDIUM 41

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00262 Published 2026-10-20 No fix listed CWE-306

TI-2026-77487 CVE-2026-91432 · GHSA-rcm8-cmj3-xfx9

Improper access control in Oracle Siebel CRM End User exposes data

LOW 35

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00272 Published 2026-10-20 No fix listed CWE-284

TI-2026-77486 CVE-2026-91431 · GHSA-hhmr-6jjw-xxgx

Improper access control in Oracle Siebel CRM End User

LOW 24

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00124 Published 2026-10-20 No fix listed CWE-284

TI-2026-77483 CVE-2026-91428 · GHSA-8p5g-vp3h-xv7r

URL redirection in Oracle Siebel CRM End User Open UI

LOW 19

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0021 Published 2026-10-20 No fix listed CWE-601

TI-2026-77469 CVE-2026-91412 · GHSA-p77r-vmg2-mqrf

Improper access control in Oracle Siebel CRM End User Open UI

LOW 29

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00353 Published 2026-10-20 No fix listed CWE-284

TI-2026-77452 CVE-2026-91393 · GHSA-rfqf-5pwc-xp7h

Cross-site request forgery in Oracle Siebel CRM End User

LOW 14

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0012 Published 2026-10-20 No fix listed CWE-352

TI-2026-77451 CVE-2026-91392 · GHSA-6p96-v33q-gfhf

Missing authentication in Oracle Siebel CRM End User Open UI

LOW 17

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00195 Published 2026-10-20 No fix listed CWE-306

TI-2026-77450 CVE-2026-91391 · GHSA-32gg-jv26-gmvx

Information exposure in Oracle Siebel CRM End User Open UI

LOW 17

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00264 Published 2026-10-20 No fix listed CWE-200

TI-2026-77449 CVE-2026-91390 · GHSA-9jg2-j5c8-v76f

Improper access control in Oracle Siebel CRM End User Open UI

LOW 24

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00196 Published 2026-10-20 No fix listed CWE-284

TI-2026-77448 CVE-2026-91389 · GHSA-wm3r-4m4m-3794

Improper access control in Oracle Siebel CRM End User Open UI

LOW 24

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00196 Published 2026-10-20 No fix listed CWE-284

TI-2026-77447 CVE-2026-91388 · GHSA-vvmj-vpgh-w28v

Improper access control in Oracle Siebel CRM End User Open UI

LOW 21

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00155 Published 2026-10-20 No fix listed CWE-284

TI-2026-77446 CVE-2026-91387 · GHSA-mq75-6x7h-4jch

Improper access control in Oracle Siebel CRM End User

LOW 24

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00222 Published 2026-10-20 No fix listed CWE-284

TI-2026-77782 CVE-2026-101467 · GHSA-73gv-r3g4-mr6x

Improper access control in Oracle Siebel CRM End User

LOW 34

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00353 Published 2026-10-20 No fix listed CWE-284

TI-2026-77778 CVE-2026-101463 · GHSA-72wm-qpw6-gpc5

Access control flaw in Oracle Siebel CRM End User exposes data

LOW 39

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2026-10-20 No fix listed CWE-284