Threat Intelligence Database

CVE-2026-60414 is a vulnerability in Oracle Outside In Technology version 8.5.8 that allows an unauthenticated attacker with logon access to the infrastructure to compromise the product. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to full takeover of Oracle Outside In Technology. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.

CVE-2026-60413 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with logon access to the infrastructure where the product executes to compromise it. Exploitation requires human interaction from a user other than the attacker and can lead to full takeover of the Oracle Outside In Technology component. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.8. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities but does not explicitly confirm a patch for this specific version in the advisory content provided.

CVE-2026-60412 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8. It allows an unauthenticated attacker with logon access to the infrastructure where the product runs to compromise it, requiring human interaction from a third party. Successful exploitation can lead to full takeover of Oracle Outside In Technology. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-60392 is a high-severity vulnerability in Oracle Outside In Technology version 8.5.8, specifically in the Outside In PDF Export SDK component. It allows an unauthenticated attacker with logon access to the infrastructure where the technology executes to compromise the product. Exploitation requires human interaction from a person other than the attacker and can lead to full takeover of Oracle Outside In Technology. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability.

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK). The supported version that is affected is 8.5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

MediumVulnerabilityGermanyFranceNetherlands+5#cve#cve-2024-20930