CVE Catalog

CVE-2026-83212

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

29th percentile - higher than 29% of all known CVEs

Summary

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can result in takeover of the application.

Risk Assessment

A low privileged attacker can take over the Siebel Self Service application, impacting confidentiality, integrity, and availability. The high CVSS score of 8.8 indicates significant risk to the organization.

Recommendation

Immediately apply available Oracle patches for versions 17.0-26.7 and restrict network access to the Helpdesk/Training component. Monitor logs for unusual user activity.

Other vulnerabilities in Oracle Siebel CRM

See all
Original NVD description (English source)

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Self Service. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Self Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS