CVE-2026-83230
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Vulnerability in Oracle Siebel CRM Deployment (component: Siebel Management Console) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify, insert, or delete data. CVSS 3.1 Base Score 7.1.
Risk Assessment
Potential unauthorized access to critical data and data modification, compromising confidentiality and integrity of CRM data.
Recommendation
Update Siebel CRM Deployment to the latest version and restrict access to the Siebel Management Console to trusted users.
Other vulnerabilities in Siebel CRM Deployment
See all- CVE-2026-21926High
Vulnerability in Oracle Siebel CRM Deployment product (component: Server Infrastructure) affects versions 17.0-25.2. An unauthenticated attacker with network access via TLS can easily compromise the system, causing a hang or frequently repeatable crash (complete DoS).
- CVE-2026-83228High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 7.5.
- CVE-2026-83226High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5.
- CVE-2026-83225High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 7.5.
- CVE-2026-83224High
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause partial denial of service. CVSS 3.1 Base Score 7.1.
- CVE-2026-83223High
Vulnerability in Oracle Siebel CRM Deployment (component: Siebel Remote) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5.
- CVE-2026-83183High
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful attacks can result in an unauthorized hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment.
- CVE-2026-70856High
Vulnerability in Siebel CRM Deployment (component: Migration) versions 17.0-26.6. An unauthenticated attacker with network access via HTTP can compromise the system, but exploitation is difficult and requires user interaction. Successful attacks may result in full takeover of Siebel CRM Deployment.
- CVE-2026-60798High
Vulnerability in Siebel CRM Deployment (component: Migration). Affects versions 17.0-26.6. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to data and modify it. Attack may impact additional products (scope change).
- CVE-2026-60792High
Vulnerability in Siebel CRM Deployment (component: Server Infrastructure). Affects versions 17.0-26.6. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to data and modify it.
Original NVD description (English source)
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS