Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2026.html |
Configurations
No configuration.
History
23 Oct 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-404 |
20 Oct 2026, 22:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-20 22:20
Updated : 2026-10-23 21:17
NVD link : CVE-2026-91427
Mitre link : CVE-2026-91427
CVE.ORG link : CVE-2026-91427
JSON object : View
Products Affected
No product.
CWE
CWE-404
Improper Resource Shutdown or Release