CVE-2026-60808

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromise Siebel Apps - Marketing. While the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Marketing accessible data as well as unauthorized access to critical data or complete access to all Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).

• CWE-284

• https://www.oracle.com/security-alerts/cspuaug2026.html

Published

Aug 18, 2026

Last Modified

Aug 21, 2026

Status

Undergoing Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-60802Vulnerability in the Oracle E-Business Intelligence product …6.1
• CVE-2026-60803Vulnerability in the Siebel Apps - Marketing product of Orac…7.4
• CVE-2026-60804Vulnerability in the Oracle E-Business Intelligence product …2
• CVE-2026-60805Vulnerability in the Oracle Cost Management product of Oracl…6.2
• CVE-2026-60806Vulnerability in the Oracle Cost Management product of Oracl…7.5
• CVE-2026-60807Vulnerability in the Oracle Bills of Material product of Ora…8
• CVE-2026-60810Vulnerability in the Oracle Supply Chain Trading Connector p…8.2
• CVE-2026-60811Vulnerability in the Oracle Supply Chain Trading Connector p…6.3
• CVE-2026-60812Vulnerability in the Oracle Supply Chain Trading Connector p…6.5
• CVE-2026-60813Vulnerability in the Oracle iStore product of Oracle E-Busin…7.2
• CVE-2026-60815Vulnerability in the Oracle iStore product of Oracle E-Busin…6.1
• CVE-2026-60816Vulnerability in the Oracle iStore product of Oracle E-Busin…5.3