This vulnerability affects Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker who has logon access to the underlying infrastructure to compromise the Oracle Outside In Technology component. Exploitation requires user interaction by a person other than the attacker. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates that the attack requires local access with low complexity, no privileges, but requires user interaction, and can result in high confidentiality, integrity, and availability impacts. The vendor advisory references a Critical Security Patch Update from August 2026 but does not explicitly confirm a patch for this specific vulnerability in Oracle Outside In Technology 8.5.8.

Successful exploitation can lead to complete takeover of Oracle Outside In Technology, impacting confidentiality, integrity, and availability of the affected component. The vulnerability requires local access and user interaction, which limits remote exploitation but still poses a significant risk in environments where attackers can gain infrastructure logon.

Oracle strongly recommends applying the latest Critical Security Patch Updates promptly. The August 2026 Critical Security Patch Update advisory should be reviewed for patch availability and installation instructions. Since no explicit patch link is provided for Oracle Outside In Technology 8.5.8 in the advisory, users should verify patch status directly with Oracle support and ensure all relevant patches are applied without delay.