CVE-2026-83183: High severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel CRM Deployment Server Infrastructure in supported versions 17.0 through 26.7 is affected.
Does exploitation require authentication or user interaction?
No. An unauthenticated attacker with network access to the affected service over HTTP can exploit the vulnerability without user interaction.
What is the practical impact of successful exploitation?
Successful exploitation can cause the Siebel CRM Deployment service to hang or repeatedly crash, resulting in a complete denial of service. The provided CVSS assessment indicates no confidentiality or integrity impact.