Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cspusep2026.html |
Configurations
No configuration.
History
22 Sep 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 |
17 Sep 2026, 16:18
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
Information
Published : 2026-09-15 20:18
Updated : 2026-09-22 18:17
NVD link : CVE-2026-83208
Mitre link : CVE-2026-83208
CVE.ORG link : CVE-2026-83208
JSON object : View
Products Affected
No product.
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')