CVE-2026-83230 is a vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Siebel Management Console component. It affects supported versions 17.0 through 26.7. The vulnerability is easily exploitable by an attacker with low privileges and network access via HTTP. Exploitation can result in unauthorized access to critical data and unauthorized update, insert, or delete operations on some accessible data. The CVSS 3.1 base score is 7.1 with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N, indicating network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact.

An attacker with low privileges and network access can exploit this vulnerability to gain unauthorized access to critical data within Siebel CRM Deployment and perform unauthorized modifications (update, insert, delete) on some accessible data. This compromises confidentiality and integrity of the affected system data but does not impact availability.

Oracle has released security patches addressing this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches without delay and remain on actively supported versions. No indication of temporary or alternative mitigations is provided; patching is the recommended remediation.