Vulnerability in Oracle Fusion Middleware's Outside In Clean Content SDK
CVE-2026-91342

8.2HIGH

Key Information:

Vendor

Oracle
Status
Oracle Outside In Technology
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91342?

A vulnerability exists in the Oracle Outside In Technology product within the Oracle Fusion Middleware suite, specifically in the 8.5.8 version of the Outside In Clean Content SDK. This vulnerability allows an unprotected attacker with network access via HTTP to exploit the system, revealing risks to the integrity and confidentiality of data. Successful exploitation would require human interaction from an individual other than the attacker. As a result, unauthorized operations may occur, including the creation, deletion, or modification of critical data within the Oracle Outside In Technology ecosystem, as well as potentially accessing sensitive subsets of data stored in the system. This not only places the affected product at risk but also may impact other interconnected systems significantly.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.