CVE-2026-83218

A vulnerability in Oracle Siebel CRM affects the Siebel CRM Deployment product (component: Server Infrastructure ), versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it carries high attack complexity . Successful exploitat...

CVE-2026-83216

Oracle Siebel CRM – specifically the Server Infrastructure component of Siebel CRM Deployment – is affected by a locally exploitable vulnerability in supported versions 17.0 through 26.7 . A low-privileged attacker with local logon can exploit it with low complexity and no user interaction to ach...

CVE-2026-83214

Siebel CRM Deployment (component: Server Infrastructure ) in Oracle Siebel CRM versions 17.0–26.7 is affected by an easily exploitable vulnerability that allows a low-privileged attacker with local logon access to achieve takeover of the deployment, with high impact to confidentiality, integrity,...

CVE-2026-83215

CVE-2026-83215 affects the Server Infrastructure component of Oracle Siebel CRM , versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resulting in high confidentiality impact (unauthorize...

CVE-2026-83213

Oracle Siebel CRM End User (component: Reports ) has a vulnerability affecting supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data or complete access to all Siebel CRM End User accessibl...

CVE-2026-83210

Oracle Siebel CRM (Server Infrastructure component) is affected by a SQL-injection-style vulnerability in the Siebel CRM Deployment product, impacting supported versions 17.0 through 26.7 . A low-privileged attacker with network access via SQL can exploit this with low complexity and no user inte...

CVE-2026-83212

Oracle Siebel CRM (component: Siebel Apps – Self Service, Helpdesk/Training) is affected by an easily exploitable vulnerability in supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can achieve a full takeover of the application, resulting in high impact...

CVE-2026-83211

Oracle Siebel CRM (component: Server Infrastructure ) in the Siebel CRM Deployment product has an easily exploitable local vulnerability affecting supported versions 17.0–26.7 . A low-privileged attacker with logon to the hosting infrastructure can exploit this with low complexity and no user int...

CVE-2026-83206

Oracle Banking Corporate Lending Process Management (Oracle Financial Services Applications, component: Base) is affected by a vulnerability in supported versions 14.5.0.0.0–14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, bu...

CVE-2026-83209

A vulnerability in Oracle Siebel CRM Development (component: Workflow ) affects supported versions 17.0 through 26.7 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to achieve takeover of the product, with high impact to confidentiality, integrity, and a...

CVE-2026-83207

Oracle Siebel CRM Development (component: Integration – Scripting ) versions 17.0–26.7 are affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to cause a complete denial of service (hang or repeatable crash), as well as unauthorized read, update, insert,...

CVE-2026-83208

Oracle Siebel CRM Deployment (component: Migration ) is affected by a vulnerability in supported versions 17.0–26.7 . A low-privileged attacker with network access via SQL can exploit this with low complexity to achieve takeover of the Siebel CRM Deployment component, resulting in high impact to ...

CVE-2026-83204

Oracle Sourcing (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by a vulnerability exploitable by a low-privileged attacker with network access via HTTP . The exploit is rated difficult to exploit (high attack complexity), but successfu...

CVE-2026-83205

Oracle Applications Framework within Oracle E-Business Suite is affected via the Personalization component, impacting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resu...

CVE-2026-83203

CVE-2026-83203 affects the Open UI component of Oracle Siebel CRM End User , versions 17.0–26.7 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to gain unauthorized access to critical data, perform unauthorized updates, inserts, or deletions, and ca...

CVE-2026-83200

CVE-2026-83200 affects the Oracle Process Manufacturing Intelligence product within Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via Oracle Net can exploit this vulnerability w...

CVE-2026-83202

A critical vulnerability (CVSS 3.1: 9.1) affects the Server Infrastructure component of Oracle Siebel CRM Deployment, versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can create, delete, modify, or read critical and all accessible data, with high confidentiali...

CVE-2026-83201

CVE-2026-83201 affects Oracle Siebel CRM Deployment (component: Server Infrastructure), versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, modification, or read access to critical data. T...

CVE-2026-83197

Oracle Siebel CRM – specifically the Siebel Apps – Financial Services product (component: Financial Accounts ) – is affected in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity. Successful exploitati...

CVE-2026-83198

Oracle Field Service (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3–12.2.15 contains an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction f...