CVE-2026-91427
Low · 2.3CVSS
2.3
EPSS
0.1%
Published
Oct 20, 2026
CISA due date
—
The record
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118276 A vulnerability was determined in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118275 A vulnerability was found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118274 A vulnerability has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118273 A flaw has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118271 A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-117505 A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. CWE-404
- CVE-2026-117506 A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. CWE-404
- CVE-2026-117504 A vulnerability was identified in a2aproject a2a-go up to 2.4.0. CWE-404