CVE-2026-83143

Received Received - Intake

Unauthenticated Access in Siebel Apps - Life Sciences

Publication date: 2026-09-15

Last updated on: 2026-09-18

Assigner: Oracle

Description

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Life Sciences. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Life Sciences accessible data as well as unauthorized access to critical data or complete access to all Siebel Apps - Life Sciences accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-18

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83143

EUVD

EUVD-2026-79470

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_crm	From 17.0 (inc) to 26.7 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Siebel CRM's Life Sciences product (component: eDetailing). It affects versions 17.0 to 26.7. An unauthenticated attacker can exploit it remotely via HTTP. The attack requires user interaction. Successful exploitation can lead to unauthorized data creation, deletion, or modification, as well as unauthorized access to critical or all accessible data in the application.

Detection Guidance

This vulnerability requires manual detection as no specific commands are provided in the context. Focus on monitoring for unauthorized data modifications or access in Siebel Apps - Life Sciences. Check HTTP traffic for unusual requests targeting the eDetailing component. Review logs for suspicious activity involving critical data changes.

Impact Analysis

If you use the affected Oracle Siebel CRM Life Sciences product, an attacker could gain unauthorized access to sensitive data, modify or delete critical information, or create false data. This could disrupt operations, lead to data breaches, or compromise business integrity.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, which may violate GDPR (data protection) and HIPAA (health information privacy) requirements. Non-compliance risks include legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Apply the latest Oracle Siebel CRM patches for versions 17.0-26.7 to address the vulnerability. Restrict network access to HTTP ports used by Siebel Apps - Life Sciences. Monitor for unauthorized data modifications or access attempts.

Hi! I’m here to help you understand CVE-2026-83143. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70