CVE-2026-83219: High severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Organizations running Oracle Siebel CRM Deployment Server Infrastructure in supported affected versions 17.0 through 26.7 are exposed, but exploitation requires an attacker to have a low-privileged logon to the infrastructure where Siebel CRM Deployment executes.
What access does an attacker need to exploit it?
The attacker needs local access and a low-privileged account on the infrastructure hosting Siebel CRM Deployment. No user interaction is required, and the attack complexity is low.
What could a successful attacker do?
A successful attacker could gain unauthorized access to critical data or all data accessible to Siebel CRM Deployment, and could create, delete, or modify that data. The stated impact affects confidentiality and integrity, not availability.
How can I determine whether my deployment is affected?
Confirm whether Oracle Siebel CRM Deployment is installed and whether its Server Infrastructure component is running a supported version from 17.0 through 26.7. Also identify low-privileged accounts that can log on to the infrastructure where the deployment executes.