Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:outside_in_technology:8.5.8:*:*:*:*:*:*:*

part: a version: 8.5.8 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductOutside In Technology (1afab250-9904-5adb-bf26-7cc4c870c6f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-87393 vulnerable 2026-11-03 10:16:09.226804 Details available
MEDIUM (6.5)
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).
Published: 2026-10-20T21:24:28.429Z
Updated: 2026-10-28T14:49:54.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87304 vulnerable 2026-11-03 10:16:09.184349 Details available
HIGH (8.6)
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. While the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Published: 2026-10-20T21:23:56.690Z
Updated: 2026-10-27T19:27:12.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87397 vulnerable 2026-11-03 10:16:09.171852 Details available
HIGH (8.8)
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Outside In Technology. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
Published: 2026-10-20T21:24:29.820Z
Updated: 2026-10-28T14:53:09.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87396 vulnerable 2026-11-03 10:16:08.762127 Details available
MEDIUM (6.5)
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).
Published: 2026-10-20T21:24:29.474Z
Updated: 2026-10-28T14:51:50.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87398 vulnerable 2026-11-03 10:16:08.643008 Details available
HIGH (7.5)
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-10-20T21:24:30.182Z
Updated: 2026-10-22T18:50:22.009Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87394 vulnerable 2026-11-03 10:16:08.443105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91460 vulnerable 2026-11-03 10:15:57.744600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91406 vulnerable 2026-11-03 10:15:57.723904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91459 vulnerable 2026-11-03 10:15:57.649758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91458 vulnerable 2026-11-03 10:15:57.558480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91475 vulnerable 2026-11-03 10:15:57.479333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91353 vulnerable 2026-11-03 10:15:57.266589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91355 vulnerable 2026-11-03 10:15:56.788584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91405 vulnerable 2026-11-03 10:15:56.758810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91351 vulnerable 2026-11-03 10:15:56.668625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91354 vulnerable 2026-11-03 10:15:56.598868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91404 vulnerable 2026-11-03 10:15:56.569956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91457 vulnerable 2026-11-03 10:15:56.532538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-91483 vulnerable 2026-11-03 10:15:56.489350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.