PatchTheCVECVE-2026-91430: Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accou
31
Routine
MEDIUM 6.5REMOTE
CVE-2026-91430 is a medium-severity flaw (CVSS 6.5) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Financial Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Apps - Fin
Why this priority
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 87%) |
| CISA exploited list | No |
| Weakness | CWE-306 |
| Published | 2026-10-20 |
| Last modified | 2026-10-23 |
Publisher (CNA): Oracle
Timeline
- Published CVE record published
- Updated Record last modified
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.