CVE-2026-83155
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with access to the physical communication segment can access critical data and cause hangs or repeatable crashes (DoS).
Risk Assessment
The ability to access critical data and cause crashes can disrupt Siebel CRM Deployment operations and breach confidentiality and availability. Access to the physical communication segment is required.
Recommendation
Apply Oracle patches for versions 17.0-26.7 and secure the physical communication segment connected to Siebel CRM Deployment. Monitor for unusual network activity.
Other vulnerabilities in Oracle Siebel CRM
See all- CVE-2026-91393Low
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data, but requires user interaction.
- CVE-2026-91392Low
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data without user interaction.
- CVE-2026-91391Low
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to read a subset of data without authorization.
- CVE-2026-91390Medium
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.
- CVE-2026-91389Medium
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.
- CVE-2026-91388Medium
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access, with user interaction, to perform unauthorized modification and read access to some data, potentially impacting additional products.
- CVE-2026-91387Medium
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can perform unauthorized modification and read access to some data.
- CVE-2026-91372Low
Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3-26.9. An easily exploitable flaw allows a low-privileged attacker with local access to read a subset of data without authorization.
- CVE-2026-101476Medium
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability, but successful attacks require human interaction. This can result in unauthorized update, insert or delete access to some Siebel Apps - Marketing accessible data.
- CVE-2026-101468High
Vulnerability in Oracle Siebel CRM Deployment (component: Cloud Gateway). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.
Original NVD description (English source)
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.3 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

