CVE-2026-83213
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Vulnerability in Oracle Siebel CRM End User (component: Reports) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all data accessible in Siebel CRM End User.
Risk Assessment
An attacker can compromise the confidentiality of data in the Siebel CRM reports module, potentially leading to leakage of sensitive business information. The CVSS score of 7.5 indicates a high risk.
Recommendation
Apply the Oracle security updates for Siebel CRM End User and restrict HTTP network access to the reports module.
Other vulnerabilities in Oracle Siebel CRM End User
See all- CVE-2026-83154Critical
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. An unauthenticated attacker with network access via SOAP can modify or delete data and gain access to all data accessible in the system.
- CVE-2026-91445High
Vulnerability in Oracle Siebel CRM End User (component: Communications Panel/Dashboard) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized update, insert or delete access to some data.
- CVE-2026-83217High
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data accessible in Siebel CRM End User.
Original NVD description (English source)
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Reports). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM End User accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS