A vulnerability in Oracle Siebel CRM Development (Integration - Scripting component) affects supported versions 17.0 through 26.7. It allows a low-privileged attacker with network access via HTTP to cause denial of service (hang or crash) and unauthorized read and write access to some accessible data. The CVSS 3.1 base score is 7.6, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.
A vulnerability exists in the Reports component of Oracle Siebel CRM End User product, affecting versions 17.0 through 26.7. This vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM End User. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high severity with a significant confidentiality impact. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes across multiple products including Siebel CRM.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (Server Infrastructure component) affecting versions 17.0 through 26.7. It allows a low privileged attacker with network access via SQL to compromise the deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and strongly recommends applying them promptly.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (Server Infrastructure component) affecting versions 17.0 through 26.7. This vulnerability allows a low-privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially resulting in complete takeover. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected products.
A high-severity vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It allows a low-privileged attacker with network access via HTTP to potentially compromise the Siebel CRM Deployment, leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
A critical vulnerability (CVE-2026-83197) exists in the Siebel Apps - Financial Services component of Oracle Siebel CRM, affecting versions 17.0 through 26.7. This vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to sensitive data or cause a denial of service by crashing the application. The CVSS 3.1 base score is 9.1, indicating high confidentiality and availability impact. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.
A vulnerability in Oracle Siebel CRM End User product (Open UI component) affects versions 17.0 through 26.7. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, perform unauthorized data modifications, and cause partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.6, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update addressing this and other vulnerabilities and strongly recommends applying patches promptly.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
A critical vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It allows a high privileged attacker with network access via HTTP to compromise the Siebel CRM Deployment, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.1. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It allows a high privileged attacker with network access via TCP to potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
A vulnerability in the Oracle Siebel CRM End User product's Open UI component affects versions 17.0 through 26.7. This vulnerability allows an unauthenticated attacker with network access via HTTP to potentially take over the Siebel CRM End User. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 that addresses this and many other vulnerabilities across multiple products, including Siebel Applications. Customers are strongly advised to apply the available patches promptly.
A vulnerability exists in the Siebel Apps - Life Sciences product of Oracle Siebel CRM affecting versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with logon access to the infrastructure to potentially take over the Siebel Apps - Life Sciences component. Exploitation requires user interaction from a person other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity with impacts to confidentiality, integrity, and availability. Oracle has included fixes for this vulnerability in its September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It is difficult to exploit but allows an unauthenticated attacker with network access via TCP to potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes for multiple products including Siebel CRM.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. It affects supported versions from 17.0 through 26.7. The vulnerability allows a low privileged attacker with logon access to the infrastructure to potentially take over the Siebel CRM Deployment. Exploitation requires user interaction from someone other than the attacker. The CVSS 3.1 base score is 7.3, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Development product of Oracle Siebel CRM, specifically in the Configuration Tools component. It affects supported versions from 17.0 through 26.7. The vulnerability requires network access and low privileges but is difficult to exploit. Successful exploitation can lead to full compromise of Siebel CRM Development, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.5, indicating high severity. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Development product of Oracle Siebel CRM, specifically in the Workspaces component. This vulnerability affects supported versions from 17.0 through 26.7. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within Siebel CRM Development and to cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with impacts on confidentiality and availability.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (Server Infrastructure component) affecting versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Deployment. The CVSS 3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM End User accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM End User accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).