Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSH to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cspusep2026.html |
Configurations
No configuration.
History
16 Sep 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
Information
Published : 2026-09-15 20:18
Updated : 2026-09-16 19:40
NVD link : CVE-2026-83074
Mitre link : CVE-2026-83074
CVE.ORG link : CVE-2026-83074
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control