CVE-2026-83193
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Vulnerability in Oracle Siebel CRM's Siebel Apps - Life Sciences (component: Life Sciences) affecting versions 17.0-26.7. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise the system, requiring user interaction.
Risk Assessment
Successful exploitation can result in full takeover of Siebel Apps - Life Sciences, impacting confidentiality, integrity, and availability. The required user interaction increases risk in environments with multiple operators.
Recommendation
Immediately apply the available Oracle security updates for Siebel Apps - Life Sciences and train users to avoid suspicious actions.
Other vulnerabilities in Oracle Siebel CRM
See all- CVE-2026-83212High
Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can result in takeover of the application.
- CVE-2026-83211High
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with logon to the infrastructure where the component executes. Successful attacks can result in takeover of the component.
- CVE-2026-83210High
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via SQL. Successful attacks can result in takeover of the component.
- CVE-2026-83209High
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can result in takeover of the component.
- CVE-2026-83208High
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via SQL. Successful attacks can result in takeover of the component.
- CVE-2026-83207High
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can cause a hang or frequently repeatable crash (complete DOS), unauthorized update, insert or delete access, and unauthorized read access.
- CVE-2026-83203High
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) affecting versions 17.0-26.7. Easily exploitable by an unauthenticated attacker with network access via HTTP. Successful attacks can result in unauthorized access to critical data, unauthorized data modifications, and partial DOS.
- CVE-2026-83192High
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User.
- CVE-2026-83155High
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with access to the physical communication segment can access critical data and cause hangs or repeatable crashes (DoS).
- CVE-2026-83153High
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTPS can take over Siebel CRM Deployment.
Original NVD description (English source)
Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life Sciences). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Life Sciences executes to compromise Siebel Apps - Life Sciences. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Life Sciences. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS