CVE-2026-83215

Oracle Siebel CRM's Deployment product contains a high-severity (CVSS 8.2) flaw in the Server Infrastructure component affecting all supported versions from 17.0 through 26.7. It is easily exploitable by an unauthenticated attacker with network access via HTTP, requiring no privileges or user interaction. A successful attack can result in unauthorized read access to critical data — or complete access to all Siebel CRM Deployment-accessible data — as well as unauthorized update, insert, and delete access to some of that data; availability is not impacted. Any organization running a supported on-premises Siebel CRM Deployment in the affected range with HTTP-reachable server infrastructure is exposed. The flaw is not in the CISA Known Exploited Vulnerabilities catalog, no public proof of concept is known, and there are no reports of in-the-wild exploitation to date.

What to do: Apply the Oracle Critical Patch Update that remediates CVE-2026-83215 to any Siebel CRM Deployment running versions 17.0-26.7. Until patched, restrict HTTP/network access to Siebel Server Infrastructure endpoints via VPN, IP allowlisting, or a reverse proxy/WAF so they are not reachable unauthenticated from the internet. Review server logs for unauthenticated HTTP requests and anomalous read, update, insert, or delete activity against Siebel-accessible data.