## Summary
Oracle Siebel CRM (Siebel Apps - Life Sciences, component eDetailing) contains an easily exploitable vulnerability (CVE-2026-83143) affecting supported versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can compromise Siebel Apps - Life Sciences, with a CVSS 3.1 base score of 8.1.
## Technical Details
- Attack vector: NETWORK over HTTP
- Privileges required: PR:N (unauthenticated)
- Attack complexity: AC:L
- User interaction: UI:R (requires human interaction from a person other than the attacker)
- Impact scope: S:U
- Confidentiality impact: C:H
- Integrity impact: I:H
- Availability impact: A:N
## Affected
- Oracle Siebel CRM — Siebel Apps - Life Sciences (eDetailing)
- Affected versions: 17.0-26.7
## Impact
Successful exploitation can lead to:
- Unauthorized creation, deletion, or modification of critical data
- Unauthorized access to critical data or complete access to all Siebel Apps - Life Sciences accessible data
- No availability impact is indicated (A:N).
## Mitigation
1. Patch immediately to a vendor-provided fixed release for the eDetailing component (versions 17.0-26.7).
2. Restrict HTTP network exposure to Siebel Apps - Life Sciences (reduce AV:N exposure).
3. Monitor for suspicious eDetailing-related activity that coincides with user interaction (UI:R), and investigate anomalous data changes (creation/deletion/modification).
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N