CVE-2026-60705

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.5

Description A flaw in the Siebel Cloud Manager component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data or all accessible data within the application. Additionally, an attacker may be able to perform unauthorized updates, insertions, or deletions of data and cause a partial denial of service (DOS), which is a condition where a system becomes partially unavailable to its intended users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.