VDB
OSA-38128812
OSA-38128812
PUBLISHED
CVSS 7.5 HIGH
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe (Apache Kafka)). Supported versions that are affected are 17.0-26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Banking Corporate Lending Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Corporate Lending Process Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Trade Finance Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Trade Finance Process Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Siebel CRM Integration Version 17.0-26.2 | Siebel CRM Integration Version 17.0-26.2 |
| Oracle | Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Origination Version 14.6.0.0.0-14.8.0.0.0 | Oracle Banking Origination Version 14.6.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Supply Chain Finance Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Supply Chain Finance Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Credit Facilities Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Credit Facilities Process Management Version 14.5.0.0.0-14.8.0.0.0 |
Timeline
- Apr 24, 2026 CVE Published