CVE-2026-91346

HighCVSS 8.2

Published: 20/10/2026(UTC)Updated: 28/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required. Successful attacks may result in unauthorized access to critical data and modification, and may impact additional products (scope change).

Risk Assessment

Potential leak of confidential data and unauthorized modification, which can harm the organization. Due to scope change, attacks may also affect other systems.

Recommendation

Update Oracle Outside In Technology to the latest patched version. Educate users about caution when opening files and links.

Other vulnerabilities in Oracle Outside In Technology

See all

Original NVD description (English source)

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS