Vulnerability in Oracle Siebel Crm
CVE-2026-47011
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). Supported versions that are affected are 17.0-26.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 2.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N).
EPSS: 0.002 (12.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Oracle Siebel_crm
- Oracle Corporation Siebel Crm Deployment — versions 17.0
Weakness classification (CWE)
References
- secalert_us@oracle.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-47011?
- CVE-2026-47011 is a low-severity vulnerability in Oracle Siebel Crm, classified under Observable Discrepancy. CVSS score: 2.6/10. Published 2026-07-21.
- How severe is CVE-2026-47011?
- Low severity. CVSS v3 base score is 2.6 out of 10.