CVE-2026-70857

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6

Description A flaw in the Open UI component of the Siebel CRM End User product allows a low-privileged attacker with network access via HTTPS to compromise the system. Exploitation is difficult and requires human interaction from a user other than the attacker. A successful attack can lead to unauthorized access, creation, deletion, or modification of critical data or all data accessible to the Siebel CRM End User, and may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.