CVE-2026-83225: High severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Oracle Siebel CRM Deployment instances using the Server Infrastructure component in supported versions 17.0 through 26.7 are affected. Exposure requires network reachability over TCP.
Does exploitation require credentials or user interaction?
No. The vulnerability is described as easily exploitable by an unauthenticated attacker with network access via TCP, with no user interaction required.
What is the likely impact of a successful attack?
A successful attack can cause the Siebel CRM Deployment service to hang or crash repeatedly, resulting in a complete denial of service. The stated CVSS impacts are limited to availability.