CVE-2026-83227
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Vulnerability in Oracle Siebel CRM Integration (component: EAI) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 7.5.
Risk Assessment
Potential full takeover of the Siebel CRM integration system, which may result in unauthorized data access and modification.
Recommendation
Update Siebel CRM Integration to the latest version and review user privileges for the EAI component.
Other vulnerabilities in Siebel CRM Integration
See all- CVE-2026-62592Critical
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Integration. CVSS 9.8.
- CVE-2026-62588Critical
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker with network access via HTTP can take over Siebel CRM Integration, with potential impact on other products (scope change). CVSS 9.9.
- CVE-2026-83326High
Vulnerability in Siebel CRM Integration (Open Integration component) of Oracle Siebel CRM (versions 25.12-26.7). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Integration data. CVSS 7.5 (Confidentiality impact).
- CVE-2026-70910High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Affects versions 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to access critical data in Siebel CRM Integration.
- CVE-2026-70859High
Vulnerability in Siebel CRM Integration (component: REST) versions 17.0-26.6. A low-privileged attacker with network access via HTTP can compromise the system, but exploitation is difficult. Successful attacks may result in full takeover of Siebel CRM Integration and may impact additional products (scope change).
- CVE-2026-62596High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker can access critical data and modify some data via HTTP, impacting other products.
- CVE-2026-62595High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with physical access to the network segment can gain full access to critical data and modify it.
- CVE-2026-62594High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A high-privileged attacker can cause data modification and complete denial of service (DoS) via HTTP, impacting other products.
- CVE-2026-62593High
Vulnerability in Oracle Siebel CRM Integration (component: Open Integration). Affected versions are 25.12-26.6. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data, with scope change.
- CVE-2026-62591High
Vulnerability in Oracle Siebel CRM Integration (component: Open Integration). Affected versions are 25.12-26.6. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration, but requires human interaction. Successful attacks can result in unauthorized creation, deletion, or modification of critical data and unauthorized access to Siebel CRM Integration data.
Original NVD description (English source)
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

