cve-2026-91427
LOW CVSS 2.3 opencve
Description
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
Timeline
- Published
- 2026-10-20 22:20 UTC
- Last Modified
- 2026-11-04
CVSS Details
CVSS details not available.
Affected Products
No product information available.
CVSS metrics
| Version | Base | Severity | Vector | Exploitability | Impact | Source |
|---|---|---|---|---|---|---|
| 3.1 | 2.3 | LOW | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L |
mitre | ||
| 3.1 | 2.3 | LOW | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L |
nvd | ||
| 3.1 | 2.3 | LOW | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L |
opencve |
References
No references available.
Linked Vulnerabilities
{
"cve": "CVE-2026-91427",
"enrichment": {
"affected": [
{
"configurations": [
{
"platform": null,
"status": "affected",
"versions": {
"scheme": "generic",
"value": "[17.0,26.9]"
}
}
],
"enrichment": {
"confidence": 100.0,
"confidence_source": "matching",
"scores": [
{
"score": 100.0,
"source": "matching"
}
]
},
"original": {
"product": "Siebel CRM Deployment",
"source": "cna",
"vendor": "Oracle Corporation"
},
"product": "siebel_crm_deployment",
"vendor": "oracle"
}
],
"created": "2026-10-21T10:15:14.508107+00:00",
"updated": "2026-10-24T00:30:12.501132+00:00",
"vendors": [
"oracle",
"oracle$PRODUCT$siebel_crm_deployment"
]
},
"epss": {
"score": 0.00163
},
"mitre": {
"cpes": [
"cpe:2.3:a:oracle:siebel_crm_deployment:*:*:*:*:*:*:*:*"
],
"created": "2026-10-20T21:25:54.461000+00:00",
"description": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {
"score": 2.3,
"vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L"
},
"cvssV4_0": {}
},
"mitre_repo_path": "cves/2026/91xxx/CVE-2026-91427.json",
"references": [
"https://www.oracle.com/security-alerts/cpuoct2026.html"
],
"title": null,
"updated": "2026-10-23T20:12:23.908000+00:00",
"vendors": [
"oracle",
"oracle$PRODUCT$siebel_crm_deployment"
],
"weaknesses": []
},
"nvd": {
"cpes": [
"cpe:2.3:a:oracle:siebel_crm:*:*:*:*:*:*:*:*"
],
"created": "2026-10-20T22:20:46.090000+00:00",
"description": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {
"score": 2.3,
"vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L"
},
"cvssV4_0": {}
},
"nvd_repo_path": "2026/CVE-2026-91427.json",
"references": [
"https://www.oracle.com/security-alerts/cpuoct2026.html"
],
"title": null,
"updated": "2026-11-04T15:08:39.523000+00:00",
"vendors": [
"oracle",
"oracle$PRODUCT$siebel_crm"
],
"weaknesses": [
"CWE-404"
]
},
"opencve": {
"changes": [
{
"created": "2026-10-20T21:30:00+00:00",
"data": [
{
"details": {
"new": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).",
"old": null
},
"type": "description"
},
{
"details": [
"oracle",
"oracle$PRODUCT$siebel_crm_deployment"
],
"type": "first_time"
},
{
"details": {
"added": [
"cpe:2.3:a:oracle:siebel_crm_deployment:*:*:*:*:*:*:*:*"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"oracle",
"oracle$PRODUCT$siebel_crm_deployment"
],
"removed": []
},
"type": "vendors"
},
{
"details": {
"added": [
"https://www.oracle.com/security-alerts/cpuoct2026.html"
],
"removed": []
},
"type": "references"
},
{
"details": {
"added": {
"cvssV3_1": {
"score": 2.3,
"vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L"
}
},
"removed": {},
"updated": {}
},
"type": "metrics"
}
],
"id": "b95172c6-e7ca-460a-b8ee-736973726a51"
},
{
"created": "2026-10-21T10:30:00+00:00",
"data": [
{
"details": {
"new": "Partial DoS via High-Privileged Logon in Oracle Siebel CRM Deployment",
"old": null
},
"type": "title"
},
{
"details": {
"added": [
"CWE-284"
],
"removed": []
},
"type": "weaknesses"
}
],
"id": "387aa95b-9098-483b-957e-8d453b4a4900"
},
{
"created": "2026-10-23T21:30:00+00:00",
"data": [
{
"details": {
"added": [
"CWE-404"
],
"removed": []
},
"type": "weaknesses"
},
{
"details": {
"added": {
"ssvc": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "partial"
},
"version": "2.0.3"
}
},
"removed": {},
"updated": {}
},
"type": "metrics"
}
],
"id": "e2e7f31c-3136-4707-adb7-83b024dc5b30"
},
{
"created": "2026-10-23T23:30:00+00:00",
"data": [
{
"details": {
"new": null,
"old": "Partial DoS via High-Privileged Logon in Oracle Siebel CRM Deployment"
},
"type": "title"
},
{
"details": {
"added": [],
"removed": [
"CWE-284"
]
},
"type": "weaknesses"
}
],
"id": "9e276573-723e-4bee-af21-73c5f46df1da"
},
{
"created": "2026-11-04T15:15:00+00:00",
"data": [
{
"details": [
"oracle$PRODUCT$siebel_crm"
],
"type": "first_time"
},
{
"details": {
"added": [
"cpe:2.3:a:oracle:siebel_crm:*:*:*:*:*:*:*:*"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"oracle$PRODUCT$siebel_crm"
],
"removed": []
},
"type": "vendors"
}
],
"id": "af3cecd6-5cc0-4dde-a5c0-41304e3bd740"
}
],
"cpes": {
"data": [
"cpe:2.3:a:oracle:siebel_crm:*:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:siebel_crm_deployment:*:*:*:*:*:*:*:*"
],
"providers": [
"mitre",
"nvd"
]
},
"created": {
"data": "2026-10-20T21:25:54.461000+00:00",
"provider": "mitre"
},
"description": {
"data": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).",
"provider": "mitre"
},
"metrics": {
"cvssV2_0": {
"data": {},
"provider": null
},
"cvssV3_0": {
"data": {},
"provider": null
},
"cvssV3_1": {
"data": {
"score": 2.3,
"vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L"
},
"provider": "mitre"
},
"cvssV4_0": {
"data": {},
"provider": null
},
"epss": {
"data": {
"score": 0.00163
},
"provider": "first"
},
"kev": {
"data": {},
"provider": null
},
"ssvc": {
"data": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "partial"
},
"version": "2.0.3"
},
"provider": "vulnrichment"
},
"threat_severity": {
"data": null,
"provider": null
}
},
"references": {
"data": [
"https://www.oracle.com/security-alerts/cpuoct2026.html"
],
"providers": [
"mitre",
"nvd"
]
},
"title": {
"data": null,
"provider": null
},
"updated": {
"data": "2026-11-04T15:08:39.523000+00:00",
"provider": "nvd"
},
"vendors": {
"data": [
"oracle",
"oracle$PRODUCT$siebel_crm",
"oracle$PRODUCT$siebel_crm_deployment"
],
"providers": [
"mitre",
"nvd",
"enrichment"
]
},
"weaknesses": {
"data": [
"CWE-404"
],
"providers": [
"nvd",
"vulnrichment"
]
}
},
"vulnrichment": {
"cpes": [],
"created": "2026-10-20T21:25:54.461000+00:00",
"description": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {},
"cvssV4_0": {},
"kev": {},
"ssvc": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "partial"
},
"version": "2.0.3"
}
},
"references": [],
"title": null,
"updated": "2026-10-23T20:12:19.009000+00:00",
"vendors": [],
"vulnrichment_repo_path": "2026/91xxx/CVE-2026-91427.json",
"weaknesses": [
"CWE-404"
]
}
}
Enrichment data
Aggregated bundle (all enrichments)