Unauthenticated Access Vulnerability in Oracle Outside In Technology
CVE-2026-91404

4MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Outside In Technology
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91404?

This vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Outside In Technology operates to exploit weaknesses in the Oracle Fusion Middleware component. The attacker can gain unauthorized read access to sensitive data, potentially compromising the security and confidentiality of the information managed by Oracle Outside In Technology. It is essential for organizations using the affected version to take immediate action to mitigate this risk.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.