VulnSea

siebel_apps_-_customer_order_management vulnerabilities

CVEs whose affected-version data names the siebel_apps_-_customer_order_management package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

4 CVEsRSS

CVE-2026-91441Medium· 6.5
1w ago

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management)

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker…

▾ SunlitOracle Corporation · Siebel Apps - Customer Order ManagementEPSS 0.19%via CVEORG
CVE-2026-83145High· 8.7
1mo ago

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management)

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker…

▾ TwilightOracle Corporation · Siebel Apps - Customer Order ManagementEPSS 0.32%via NVD
CVE-2026-83144High· 8.7
1mo ago

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management)

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker…

▾ TwilightOracle Corporation · Siebel Apps - Customer Order ManagementEPSS 0.32%via NVD
CVE-2020-9281Medium· 6.1
6y ago

A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).

A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).

▾ Sunlitckeditor · ckeditorEPSS 4.3%via NVD
siebel_apps_-_customer_order_management vulnerabilities (CVEs) · VulnSea