CVE-2026-60711 Oracle Corporation CVE debrief

Who should care

Organizations using Siebel CRM Cloud Applications versions 22.3-26.5 should prioritize patching this vulnerability. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications, potentially impacting additional products. Operators, platform administrators, vulnerability management teams, and security teams should review and act on this vulnerability.

Technical summary

The vulnerability in Siebel CRM Cloud Applications has a CVSS 3.1 Base Score of 9.9, indicating a critical severity level. It is easily exploitable and allows a low-privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks can result in the takeover of Siebel CRM Cloud Applications. The CVSS Vector is (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). This vulnerability affects Siebel CRM Cloud Applications versions 22.3-26.5, classified under the component Siebel Cloud Manager.

Defensive priority

High priority should be given to patching this vulnerability due to its critical severity and potential impact on Siebel CRM Cloud Applications and additional products.

Recommended defensive actions

• Apply the patch provided by Oracle as soon as possible
• Review and update network access controls to limit exposure
• Monitor Siebel CRM Cloud Applications for suspicious activity
• Consider implementing compensating controls if patching is not immediately feasible
• Review relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record was published on 2026-07-21T22:18:11.553Z and was last modified on 2026-07-25T05:16:42.083Z. The NVD entry is currently Awaiting Analysis. Oracle Siebel CRM Cloud Applications versions 22.3-26.5 are affected by this vulnerability, which is classified under the component Siebel Cloud Manager. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications, potentially impacting additional products. Organizations should verify their deployments and plan for patching.

Official resources