Vulnerability in Oracle Fusion Middleware's Outside In Technology Allows Compromise
CVE-2026-60392

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Outside In Technology
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60392?

A vulnerability exists in the Oracle Fusion Middleware component, Outside In Technology, specifically within the Outside In PDF Export SDK (version 8.5.8). This flaw allows an unauthenticated attacker with access to the infrastructure where the Oracle Outside In Technology operates to potentially compromise the application. Successful exploitation of this vulnerability requires human interaction from a user other than the attacker, which may facilitate unauthorized actions. This vulnerability presents risks to the confidentiality, integrity, and availability of systems utilizing this technology.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.