Skip to main content

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life Sciences). (CVE-2026-83193)

0
High
Published: 09/15/2026 (09/15/2026, 21:32:20 UTC)
Source: GCVE Database

Description

A vulnerability exists in the Siebel Apps - Life Sciences product of Oracle Siebel CRM affecting versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with logon access to the infrastructure to potentially take over the Siebel Apps - Life Sciences component. Exploitation requires user interaction from a person other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity with impacts to confidentiality, integrity, and availability. Oracle has included fixes for this vulnerability in its September 2026 Critical Security Patch Update.

CVSS v3.1

Score 7.3high

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected software

Affected versions
>=17.0 <=26.7

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 09/16/2026, 04:15:35 UTC

Technical Analysis

CVE-2026-83193 is a vulnerability in the Siebel Apps - Life Sciences component of Oracle Siebel CRM affecting versions 17.0 through 26.7. It allows a low privileged attacker with logon access to the underlying infrastructure to compromise the Siebel Apps - Life Sciences product. Successful exploitation requires user interaction from a third party. The vulnerability is rated with a CVSS 3.1 base score of 7.3 (AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), indicating high impact on confidentiality, integrity, and availability. Oracle addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted security patches for affected products including Siebel Applications.

Potential Impact

Successful exploitation can result in complete takeover of the Siebel Apps - Life Sciences product, impacting confidentiality, integrity, and availability of the system. The attack requires low privileges but does require user interaction from a different user. The vulnerability poses a high risk to affected environments if unpatched.

Mitigation Recommendations

Oracle has released a security patch addressing this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the provided patches promptly to remediate this issue. Oracle recommends remaining on actively supported versions and applying security patches without delay. No additional mitigation steps are indicated beyond patching.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
GHSA-x235-c59q-95cr
Osv Schema Version
1.4.0
Aliases
["CVE-2026-83193"]
Database Specific Severity
HIGH
Cvss Version
3.1
State
PUBLISHED

Threat ID: 6aaa07df55bf5e2cf5ea331f

Added to database: 09/16/2026, 03:07:11 UTC

Last enriched: 09/16/2026, 04:15:35 UTC

Last updated: 09/16/2026, 05:01:23 UTC

Views: 2

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses