Vulnerability in Oracle Outside In Technology of Oracle Fusion Middleware
CVE-2026-91351

6.1MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-91351?

A vulnerability has been identified in Oracle Outside In Technology, specifically in the Outside In Clean Content SDK within Oracle Fusion Middleware. This issue allows an attacker with low privileges who is logged into the infrastructure where the technology is implemented to exploit the system. Successful exploitation can lead to unauthorized actions, such as the creation, deletion, or modification of critical data accessible by Oracle Outside In Technology. Furthermore, this vulnerability poses a risk of causing a partial denial of service, impacting the availability of the application. Organizations utilizing version 8.5.8 should prioritize this issue to mitigate potential security breaches.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.