CVE-2026-83326
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Vulnerability in Siebel CRM Integration (Open Integration component) of Oracle Siebel CRM (versions 25.12-26.7). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Integration data. CVSS 7.5 (Confidentiality impact).
Risk Assessment
Breach of data confidentiality in Siebel CRM, including access to critical customer information and business data.
Recommendation
Install Oracle patches for Siebel CRM versions 25.12-26.7. Restrict access to HTTP services and monitor network traffic.
Other vulnerabilities in Siebel CRM Integration
See all- CVE-2026-91378Medium
Vulnerability in Oracle Siebel CRM Integration (component: Open Integration) affecting versions 25.12-26.9. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to compromise the product, requires human interaction, and attacks may significantly impact additional products (scope change).
- CVE-2026-62592Critical
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Integration. CVSS 9.8.
- CVE-2026-62588Critical
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker with network access via HTTP can take over Siebel CRM Integration, with potential impact on other products (scope change). CVSS 9.9.
- CVE-2026-87339Low
Vulnerability in Oracle Siebel CRM Integration (component: REST) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data, requiring human interaction. CVSS 3.1 Base Score 3.1.
- CVE-2026-101508High
Vulnerability in Siebel CRM Integration (component EAI) affecting versions 17.0-26.9. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or frequently repeatable crash (complete DoS) of Siebel CRM Integration.
- CVE-2026-83227High
Vulnerability in Oracle Siebel CRM Integration (component: EAI) affecting versions 17.0-26.7. A difficult-to-exploit attack via HTTP can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 7.5.
- CVE-2026-70910High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Affects versions 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to access critical data in Siebel CRM Integration.
- CVE-2026-70859High
Vulnerability in Siebel CRM Integration (component: REST) versions 17.0-26.6. A low-privileged attacker with network access via HTTP can compromise the system, but exploitation is difficult. Successful attacks may result in full takeover of Siebel CRM Integration and may impact additional products (scope change).
- CVE-2026-62596High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker can access critical data and modify some data via HTTP, impacting other products.
- CVE-2026-62595High
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with physical access to the network segment can gain full access to critical data and modify it.
Original NVD description (English source)
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS