CVE-2026-60412

HighCVSS 7.8

Published: 18/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Vulnerability in Oracle Outside In Technology (component: Outside In Core). Affected version is 8.5.8. Easily exploitable vulnerability allows an unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise it. Successful attacks require human interaction from a person other than the attacker and can result in takeover.

Risk Assessment

Risk includes takeover of the document processing system, potentially leading to compromise of confidentiality, integrity, and availability of data.

Recommendation

Apply patches provided by Oracle for version 8.5.8. Restrict access to the infrastructure and require authentication for users.

Other vulnerabilities in Oracle Outside In Technology

See all

Original NVD description (English source)

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Outside In Technology. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS