CVE-2026-83230: High severity Oracle Siebel CRM Deployment vulnerability
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Affected supported versions are 17.0 through 26.7 of Oracle Siebel CRM Deployment, specifically the Siebel Management Console component.
What level of access does an attacker need?
An attacker needs network access to the vulnerable service over HTTP and low-privileged credentials. No user interaction is required, and exploitation is described as easily achievable.
What could a successful attack allow?
A successful attacker could obtain unauthorized access to critical data or all data accessible to Siebel CRM Deployment. They could also perform unauthorized updates, inserts, or deletes on some accessible data.