Unauthenticated Attack Vulnerability in Oracle Fusion Middleware's Outside In Technology
CVE-2026-60414

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Outside In Technology
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60414?

A vulnerability exists in Oracle Outside In Technology, which is part of Oracle Fusion Middleware. This security flaw allows an unauthenticated attacker with network access to take control of the software, provided that certain conditions are met, including user interaction from a different person. The flaw affects version 8.5.8 of the product and could lead to significant impacts on confidentiality, integrity, and availability if exploited. Users should take immediate precautions to secure their systems to prevent potential exploits.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.