What is CVE-2026-60357?

CVE-2026-60357 is a low-severity vulnerability in Oracle Siebel Crm, classified under Improper Authentication. CVSS score: 3.7/10. Published 2026-07-21.

How severe is CVE-2026-60357?

Low severity. CVSS v3 base score is 3.7 out of 10.

Auth bypass in Oracle Siebel Crm

CVE-2026-60357

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Siebel Server Sync for Exchange). Supported versions that are affected are 17.0-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Vulnerability class: Broken Authentication

EPSS: 0.002 (15.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Oracle Siebel_crm
Oracle Corporation Siebel Crm Integration — versions 17.0

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

secalert_us@oracle.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2026-60357?: CVE-2026-60357 is a low-severity vulnerability in Oracle Siebel Crm, classified under Improper Authentication. CVSS score: 3.7/10. Published 2026-07-21.
How severe is CVE-2026-60357?: Low severity. CVSS v3 base score is 3.7 out of 10.