CVE-2026-83182
HighCVSS 7.5Summary
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools) affecting versions 17.0-26.7. A difficult to exploit vulnerability allows a low privileged attacker with network access via SQL to compromise the product. Successful attacks can result in takeover of Siebel CRM Development.
Risk Assessment
A low privileged attacker could take over the Siebel CRM Development environment, potentially causing a full breach of confidentiality, integrity and availability. The CVSS 3.1 base score is 7.5 (confidentiality, integrity and availability impacts).
Recommendation
Apply the Oracle security updates for versions 17.0-26.7 and restrict access to the database and Configuration Tools component to authorized personnel only.
Other vulnerabilities in Siebel CRM Development
See all- CVE-2026-83181High
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces) affecting versions 17.0-26.7. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data and a partial denial of service (partial DOS).
- CVE-2026-47036Critical
Vulnerability in Siebel CRM Development (Siebel Approval Manager component) allows an unauthenticated attacker via HTTP to fully compromise the system.
Original NVD description (English source)
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).