CVE-2026-83208: SQL Injection

Q: Who can exploit this vulnerability?

An attacker needs low-privileged access and network access to the affected Siebel CRM Deployment Migration component through SQL. No user interaction is required.

Q: Which deployments are affected?

Affected supported versions are 17.0 through 26.7 of Oracle Siebel CRM Deployment, specifically its Migration component.

Q: What is the potential impact of successful exploitation?

Successful exploitation can result in takeover of Siebel CRM Deployment, with high confidentiality, integrity, and availability impact.

Published Sep 15, 2026

Updated

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

1 affected component

Oracle Siebel CRM Deployment>=17.0<=26.7

Event History

Sep 15, 2026

CVE Published

via MITRE·08:04 PM

Data Sourced

via MITRE·08:04 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker needs low-privileged access and network access to the affected Siebel CRM Deployment Migration component through SQL. No user interaction is required.

Which deployments are affected?

Affected supported versions are 17.0 through 26.7 of Oracle Siebel CRM Deployment, specifically its Migration component.

What is the potential impact of successful exploitation?