CVE-2026-83181
Received Received - Intake

Siebel CRM Development Workspace Unauthorized Access Vulnerability

Vulnerability report for CVE-2026-83181, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Development accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Development. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-10-06
AI Q&A
2026-09-16
EPSS Evaluated
2026-10-04
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle siebel_crm_development From 17.0 (inc) to 26.7 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in Oracle Siebel CRM Development affecting versions 17.0 to 26.7. It allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data or all accessible data and partial denial of service.

Detection Guidance

Detection requires checking for vulnerable versions of Oracle Siebel CRM Development (17.0-26.7). Inspect installed software versions and network traffic for HTTP requests targeting the Workspaces component. No specific commands are provided in the context.

Impact Analysis

An attacker could gain access to sensitive data stored in Siebel CRM Development or disrupt system availability. This may lead to data breaches, loss of confidential information, or operational disruptions for organizations using the affected software.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Apply Oracle's official patches or updates for Siebel CRM Development. Restrict network access to the Workspaces component via firewalls. Monitor for unauthorized access or unusual activity in the system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-83181. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart