VDB
OSA-38312703
OSA-38312703
PUBLISHED
CVSS 7.5 HIGH
Record from oracle · Published April 24, 2026
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Keyword Automation (Netty)). Supported versions that are affected are 17.0-26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment.
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Banking Trade Finance Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Trade Finance Process Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Communications Cloud Native Core Network Function Cloud Native Environment Version 25.1.200 | Oracle Communications Cloud Native Core Network Function Cloud Native Environment Version 25.1.200 |
| Oracle | Oracle Banking Payments Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Payments Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.1.100 | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.1.100 |
| Oracle | Oracle Banking Origination Version 14.6.0.0.0-14.8.0.0.0 | Oracle Banking Origination Version 14.6.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 25.1.201 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 25.1.201 |
| Oracle | Oracle Communications Cloud Native Core Network Repository Function(Signaling) Version 25.1.204 | Oracle Communications Cloud Native Core Network Repository Function(Signaling) Version 25.1.204 |
| Oracle | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.2.100 | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.2.100 |
| Oracle | Siebel CRM Deployment Version 17.0-26.2 | Siebel CRM Deployment Version 17.0-26.2 |
| Oracle | Oracle Communications Cloud Native Core Network Function Cloud Native Environment Version 25.2.200 | Oracle Communications Cloud Native Core Network Function Cloud Native Environment Version 25.2.200 |
| Oracle | Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Business Intelligence Enterprise Edition Version 8.2.0.0.0 | Oracle Business Intelligence Enterprise Edition Version 8.2.0.0.0 |
Timeline
- Apr 24, 2026 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln OSA-38312703
vulnetix vdb fixes OSA-38312703Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/OSA-38312703/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart