CVE-2026-91404: Infoleak
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Instances running Oracle Outside In Technology with the Outside In PDF Export SDK version 8.5.8 are identified as affected. Exploitation requires the attacker to have logon access to the infrastructure where the product executes.
What access does an attacker need to exploit it?
The issue is locally exploitable with low attack complexity and requires no privileges or user interaction. However, the attacker must be able to log on to the host infrastructure where Oracle Outside In Technology runs.
What is the expected impact of successful exploitation?
Successful exploitation can provide unauthorized read access to a subset of data accessible to Oracle Outside In Technology. The reported impact is limited to confidentiality; no integrity or availability impact is stated.