CVE-2026-83199: High severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Oracle Siebel CRM Deployment installations running supported affected versions 17.0 through 26.7 are exposed if a low-privileged attacker can reach the Server Infrastructure component over HTTP.
What level of access does an attacker need?
An attacker needs network access via HTTP and low-privileged access to the affected product. No user interaction is required.
What could happen if exploitation succeeds?
Successful exploitation can result in takeover of Oracle Siebel CRM Deployment, with high confidentiality, integrity, and availability impact.