CVE-2026-83182

Received Received - Intake

SQL Injection in Siebel CRM Development

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83182

EUVD

EUVD-2026-79534

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	siebel_crm_development	From 17.0 (inc) to 26.7 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Siebel CRM Development (versions 17.0-26.7) that allows a low-privileged attacker with network access to exploit it via SQL injection. Successful exploitation could lead to complete takeover of the Siebel CRM Development system.

Detection Guidance

Detection requires checking for Oracle Siebel CRM Development versions 17.0-26.7. Verify installed versions and compare against the affected range. No specific commands are provided in the context for direct detection.

Impact Analysis

If exploited, an attacker could gain full control over the Siebel CRM Development system, potentially leading to unauthorized access, data theft, system manipulation, or disruption of services. This could affect business operations relying on this CRM system.

Compliance Impact

This vulnerability could lead to unauthorized access or exposure of sensitive data, which may violate compliance requirements under GDPR (data protection) or HIPAA (healthcare data privacy). Organizations using affected versions must address this to maintain regulatory compliance.

Mitigation Strategies

Apply the latest security patches from Oracle for Siebel CRM Development versions 17.0-26.7. Restrict network access to the SQL interface and limit privileges for low-privileged users. Monitor for unusual SQL queries or database activity.

Hi! I’m here to help you understand CVE-2026-83182. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70