CVE-2026-83210

Oracle Siebel CRM (Server Infrastructure component) is affected by a SQL-injection-style vulnerability in the Siebel CRM Deployment product, impacting supported versions 17.0 through 26.7 . A low-privileged attacker with network access via SQL can exploit this with low complexity and no user inte...

CVE-2026-83212

Oracle Siebel CRM (component: Siebel Apps – Self Service, Helpdesk/Training) is affected by an easily exploitable vulnerability in supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can achieve a full takeover of the application, resulting in high impact...

CVE-2026-83211

Oracle Siebel CRM (component: Server Infrastructure ) in the Siebel CRM Deployment product has an easily exploitable local vulnerability affecting supported versions 17.0–26.7 . A low-privileged attacker with logon to the hosting infrastructure can exploit this with low complexity and no user int...

CVE-2026-83206

Oracle Banking Corporate Lending Process Management (Oracle Financial Services Applications, component: Base) is affected by a vulnerability in supported versions 14.5.0.0.0–14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, bu...

CVE-2026-83208

Oracle Siebel CRM Deployment (component: Migration ) is affected by a vulnerability in supported versions 17.0–26.7 . A low-privileged attacker with network access via SQL can exploit this with low complexity to achieve takeover of the Siebel CRM Deployment component, resulting in high impact to ...

CVE-2026-83207

Oracle Siebel CRM Development (component: Integration – Scripting ) versions 17.0–26.7 are affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to cause a complete denial of service (hang or repeatable crash), as well as unauthorized read, update, insert,...

CVE-2026-83209

A vulnerability in Oracle Siebel CRM Development (component: Workflow ) affects supported versions 17.0 through 26.7 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to achieve takeover of the product, with high impact to confidentiality, integrity, and a...

CVE-2026-83204

Oracle Sourcing (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by a vulnerability exploitable by a low-privileged attacker with network access via HTTP . The exploit is rated difficult to exploit (high attack complexity), but successfu...

CVE-2026-83205

Oracle Applications Framework within Oracle E-Business Suite is affected via the Personalization component, impacting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resu...

CVE-2026-83203

CVE-2026-83203 affects the Open UI component of Oracle Siebel CRM End User , versions 17.0–26.7 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to gain unauthorized access to critical data, perform unauthorized updates, inserts, or deletions, and ca...

CVE-2026-83200

CVE-2026-83200 affects the Oracle Process Manufacturing Intelligence product within Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via Oracle Net can exploit this vulnerability w...

CVE-2026-83202

A critical vulnerability (CVSS 3.1: 9.1) affects the Server Infrastructure component of Oracle Siebel CRM Deployment, versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can create, delete, modify, or read critical and all accessible data, with high confidentiali...

CVE-2026-83201

CVE-2026-83201 affects Oracle Siebel CRM Deployment (component: Server Infrastructure), versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, modification, or read access to critical data. T...

CVE-2026-83197

Oracle Siebel CRM – specifically the Siebel Apps – Financial Services product (component: Financial Accounts ) – is affected in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity. Successful exploitati...

CVE-2026-83198

Oracle Field Service (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3–12.2.15 contains an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction f...

CVE-2026-83199

Oracle Siebel CRM (product: Siebel CRM Deployment , component: Server Infrastructure ) versions 17.0–26.7 are affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to achieve takeover of the product. The CVSS 3.1 base score is 8.8 (HIGH) with high impacts to ...

CVE-2026-83195

Oracle Siebel CRM (component: Server Infrastructure ) is vulnerable in supported versions 17.0 through 26.7 . An easily exploitable vulnerability allows a high-privileged attacker with network access via TCP to compromise Siebel CRM Deployment, resulting in full takeover with high impact to confi...

CVE-2026-83194

This vulnerability affects Oracle Depot Repair (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.10 through 12.2.15 . An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to achieve full takeover of Oracle Depot Repair, resulting ...

CVE-2026-83196

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment ) is affected by a vulnerability in supported versions 17.0 through 26.7 . A high-privileged attacker with network access via HTTP can exploit this to achieve takeover of Siebel CRM Deployment, with scope change ...

CVE-2026-83193

Oracle Siebel CRM (component: Life Sciences ) versions 17.0–26.7 are affected by a locally exploitable vulnerability that requires a low-privileged attacker with infrastructure logon and user interaction from a separate person. Successful exploitation results in full compromise (high impact to co...