CVE-2026-83213
HighCVSS 7.5Summary
Vulnerability in Oracle Siebel CRM End User (component: Reports) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all data accessible in Siebel CRM End User.
Risk Assessment
An attacker can compromise the confidentiality of data in the Siebel CRM reports module, potentially leading to leakage of sensitive business information. The CVSS score of 7.5 indicates a high risk.
Recommendation
Apply the Oracle security updates for Siebel CRM End User and restrict HTTP network access to the reports module.
Other vulnerabilities in Oracle Siebel CRM End User
See all- CVE-2026-83217High
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data accessible in Siebel CRM End User.
- CVE-2026-83154Critical
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. An unauthenticated attacker with network access via SOAP can modify or delete data and gain access to all data accessible in the system.
Original NVD description (English source)
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Reports). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM End User accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).