CVE-2026-83222: High severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Siebel CRM (Server Infrastructure)to a version that resolves this vulnerability.Fixed in 17.0-26.7 - Compensating control
Mitigate unauthenticated network access by restricting inbound connectivity to the Oracle Siebel CRM Server Infrastructure (e.g., limit access to trusted IPs and block unnecessary protocols at the network perimeter).
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Siebel CRM Deployment Server Infrastructure in supported versions 17.0 through 26.7 is affected.
Does exploitation require credentials or user interaction?
No. The vulnerability is described as easily exploitable by an unauthenticated attacker with network access, and it requires no user interaction.
What access must an attacker have?
An attacker needs network access to the affected Siebel CRM Deployment environment via multiple protocols.
What is the expected impact of successful exploitation?
Successful exploitation can cause a hang or a frequently repeatable complete denial of service crash. The stated impact is limited to availability; no confidentiality or integrity impact is specified.