Vulnerability in Oracle Fusion Middleware's Outside In Technology
CVE-2026-60412

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Outside In Technology
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60412?

A security vulnerability has been identified in the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically affecting version 8.5.8. This vulnerability allows an unauthenticated attacker who has access to the infrastructure where the product runs to exploit the technology. Notably, successful exploitation of this vulnerability hinges on human interaction from a user who is not the attacker. When exploited, this vulnerability can lead to complete compromise of Oracle Outside In Technology, impacting confidentiality, integrity, and availability.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.