Vulnerability in Oracle Outside In Technology of Oracle Fusion Middleware
CVE-2026-91475

6.6MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-91475?

A security vulnerability has been identified in the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically affecting version 8.5.8. This vulnerability allows low-privileged attackers with logon access to exploit the system to gain unauthorized rights, enabling them to create, delete, or modify sensitive data within the Oracle Outside In Technology environment. Additionally, attackers can gain unauthorized read access to specific datasets and may also cause a partial denial of service (DoS) affecting the functionality of Oracle Outside In Technology. It is crucial for organizations using this product to implement recommended security updates to safeguard against potential exploitation.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.