Executive brief
Oracle Siebel CRM Deployment is an enterprise customer relationship management platform used to manage business operations and customer interactions. A privilege escalation vulnerability in the Server Infrastructure component allows a low-privileged attacker with local access to gain complete control of the Siebel CRM system, potentially exposing customer data, disrupting service availability, and compromising business operations.
Technical details
This is a privilege escalation vulnerability in the Server Infrastructure component of Oracle Siebel CRM Deployment (versions 17.0–26.7). The vulnerability requires local access and low-level privileges but allows an authenticated attacker to escalate to full system compromise without user interaction. The attack vector is local with low complexity, and successful exploitation results in complete takeover of the Siebel CRM Deployment instance, affecting confidentiality, integrity, and availability. Patches are expected to be available from Oracle; users should consult official security advisories for remediation guidance.
Affected products
- Oracle Siebel CRM 17.0–26.7
Timeline
- 2026-09-15: disclosed