CVE-2026-83228: High severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Limit inbound TCP access to the Siebel CRM Server Infrastructure so unauthenticated attackers cannot reach it over the network (AV:N).
Oracle Siebel CRM Deployment (Server Infrastructure) Network exposure (TCP access) = Restricted to trusted IPs only - Compensating control
Mitigate network access to the Oracle Siebel CRM Deployment (Server Infrastructure) by restricting TCP connectivity to only trusted sources (e.g., via firewall/ACL) to prevent unauthenticated network exploitation that can cause a hang or repeatable crash (DoS).
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker with network access to the affected Siebel CRM Deployment service over TCP can exploit it. No privileges or user interaction are required.
What is the practical impact of successful exploitation?
Successful exploitation can cause Siebel CRM Deployment to hang or crash repeatedly, resulting in a complete denial of service. The provided data identifies availability impact only; it does not identify confidentiality or integrity impact.
Which deployments should be prioritized for remediation?
Prioritize Oracle Siebel CRM Deployment Server Infrastructure instances running supported affected versions 17.0 through 26.7 that are reachable over TCP by untrusted or broad network segments.