CVE-2026-83181
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces) affecting versions 17.0-26.7. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data and a partial denial of service (partial DOS).
Risk Assessment
An unauthenticated attacker could gain access to critical data and cause partial unavailability of the system, potentially breaching confidentiality and disrupting operations. The CVSS 3.1 base score is 8.2 (confidentiality and availability impacts).
Recommendation
Immediately apply the Oracle security updates for versions 17.0-26.7 and restrict network access to the Workspaces component to trusted users.
Other vulnerabilities in Siebel CRM Development
See all- CVE-2026-47036Critical
Vulnerability in Siebel CRM Development (Siebel Approval Manager component) allows an unauthenticated attacker via HTTP to fully compromise the system.
- CVE-2026-91413Medium
Vulnerability in the Integration - Scripting component of Siebel CRM Development. A high-privileged attacker with network access via CORBA can cause a hang or repeatable crash (complete DoS) and unauthorized data modification and read access.
- CVE-2026-83182High
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools) affecting versions 17.0-26.7. A difficult to exploit vulnerability allows a low privileged attacker with network access via SQL to compromise the product. Successful attacks can result in takeover of Siebel CRM Development.
Original NVD description (English source)
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Development accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Development. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS