CVE-2026-83216: High severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Organizations running Oracle Siebel CRM Deployment Server Infrastructure on supported versions 17.0 through 26.7 are affected. Exploitation requires an attacker to have a low-privileged account and logon access to the infrastructure where the deployment runs.
Can this be exploited remotely without credentials?
No. The supplied CVSS vector identifies local attack access and low privileges as required; no user interaction is required.
What is the potential impact of a successful attack?
A successful attacker can take over Siebel CRM Deployment, with high impact to confidentiality, integrity, and availability.