CVE-2026-91342

HighCVSS 8.2

Published: 20/10/2026(UTC)Updated: 28/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required. This may result in unauthorized creation, deletion, or modification of critical data and unauthorized read access to a subset of data, and may impact additional products (scope change).

Risk Assessment

Unauthorized modification and reading of data is possible, compromising confidentiality and integrity. Due to scope change, attacks may also affect other systems.

Recommendation

Update Oracle Outside In Technology to the latest version. Educate users about caution when opening files and links.

Other vulnerabilities in Oracle Outside In Technology

See all

Original NVD description (English source)

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS