High WID-SEC-2026-3401 63 CVEs

Oracle Siebel CRM: Mehrere Schwachstellen

Published Sep 15, 2026 · Updated Sep 15, 2026 · de-DE

Vendor: Oracle Product: Siebel CRM Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Siebel CRM ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Siebel CRM ist eine CRM-Lösung von Oracle.

Vulnerabilities 63

Critical 9.1

CVE-2026-83154

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

Oracle Siebel CRM End User

Sep 15, 2026
Critical 9.1

CVE-2026-83196

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
Critical 9.1

CVE-2026-83197

Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Sup…

Oracle Siebel Apps - Financial Services

Sep 15, 2026
Critical 9.1

CVE-2026-83201

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
Critical 9.1

CVE-2026-83202

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
Critical 9.1

CVE-2026-83229

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Support…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 8.8

CVE-2026-83086

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
High 8.8

CVE-2026-83153

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 8.8

CVE-2026-83180

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 8.8

CVE-2026-83199

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 8.8

CVE-2026-83208

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 8.8

CVE-2026-83209

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that…

Oracle Siebel CRM Development

Sep 15, 2026
High 8.8

CVE-2026-83210

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 8.8

CVE-2026-83212

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). Supported …

Oracle Siebel Apps - Self Service

Sep 15, 2026
High 8.7

CVE-2026-83144

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management)…

Oracle Siebel Apps - Customer Order Management

Sep 15, 2026
High 8.7

CVE-2026-83145

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management)…

Oracle Siebel Apps - Customer Order Management

Sep 15, 2026
High 8.6

CVE-2026-83074

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
High 8.6

CVE-2026-83203

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

Oracle Siebel CRM End User

Sep 15, 2026
High 8.2

CVE-2026-83078

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
High 8.2

CVE-2026-83085

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
High 8.2

CVE-2026-83087

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
High 8.2

CVE-2026-83181

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces). Supported versions th…

Oracle Siebel CRM Development

Sep 15, 2026
High 8.2

CVE-2026-83215

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 8.1

CVE-2026-54513

jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only…

FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Jun 23, 2026
High 8.1

CVE-2026-83073

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
High 8.1

CVE-2026-83143

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versio…

Oracle Siebel Apps - Life Sciences

Sep 15, 2026
High 8.1

CVE-2026-83191

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 8.1

CVE-2026-83192

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

Oracle Siebel CRM End User

Sep 15, 2026
High 8.1

CVE-2026-83220

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe). Supp…

Oracle Siebel CRM Integration

Sep 15, 2026
High 7.9

CVE-2026-83079

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
High 7.8

CVE-2026-82992

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions t…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.8

CVE-2026-83211

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.8

CVE-2026-83214

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.8

CVE-2026-83216

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.7

CVE-2026-83146

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

Oracle Siebel CRM End User

Sep 15, 2026
High 7.6

CVE-2026-83207

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supporte…

Oracle Siebel CRM Development

Sep 15, 2026
High 7.5

CVE-2026-50010

Netty's wrapping plain trust manager silently disables hostname verification

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustManager in X…

netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Jun 12, 2026
High 7.5

CVE-2026-83075

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
High 7.5

CVE-2026-83182

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported ve…

Oracle Siebel CRM Development

Sep 15, 2026
High 7.5

CVE-2026-83183

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.5

CVE-2026-83213

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Reports). Supported versions that are…

Oracle Siebel CRM End User

Sep 15, 2026
High 7.5

CVE-2026-83222

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.5

CVE-2026-83223

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Remote). Supported versions …

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.5

CVE-2026-83225

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.5

CVE-2026-83226

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.5

CVE-2026-83227

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are …

Oracle Siebel CRM Integration

Sep 15, 2026
High 7.5

CVE-2026-83228

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.5

CVE-2026-83326

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versi…

Oracle Siebel CRM Integration

Sep 15, 2026
High 7.4

CVE-2026-83218

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.3

CVE-2026-83155

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.3

CVE-2026-83190

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.3

CVE-2026-83193

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life Sciences). Supported ver…

Oracle Siebel Apps - Life Sciences

Sep 15, 2026
High 7.2

CVE-2026-73966

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

Oracle Siebel Apps - Marketing

Sep 15, 2026
High 7.2

CVE-2026-83195

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.1

CVE-2026-83217

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are…

Oracle Siebel CRM End User

Sep 15, 2026
High 7.1

CVE-2026-83219

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.1

CVE-2026-83221

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are …

Oracle Siebel CRM Integration

Sep 15, 2026
High 7.1

CVE-2026-83224

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported v…

Oracle Siebel CRM Deployment

Sep 15, 2026
High 7.1

CVE-2026-83230

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Support…

Oracle Siebel CRM Deployment

Sep 15, 2026
Medium 6.8

CVE-2026-73965

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions …

Oracle Siebel CRM Deployment

Sep 15, 2026
Medium 6.5

CVE-2026-55956

Apache Tomcat: Security constraints for default servlet ignored method

Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of the constraint. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22…

Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven

Jun 29, 2026
Medium 6.4

CVE-2026-83077

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp…

Oracle Siebel CRM Cloud Applications

Sep 15, 2026
Medium 5.3

CVE-2026-54515 Public exploit

jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are appli…

FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Jun 23, 2026

Revision history

2026-09-15 #1
Initiale Fassung

References

Oracle Critical Security Patch Update Advisory - September 2026 - Appendix Oracle Siebel CRM vom 2026-09-15
https://www.oracle.com/security-alerts/cspusep2026.html#AppendixSECR