CVE-2026-91404

Analyzed Analyzed - Analysis Complete

Oracle Outside In PDF Export SDK Information Disclosure

Publication date: 2026-10-20

Last updated on: 2026-11-04

Assigner: Oracle

Description

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-04

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-91404

EUVD

EUVD-2026-106656

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	outside_in_technology	8.5.8

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Outside In Technology version 8.5.8, part of Oracle Fusion Middleware. It allows an unauthenticated attacker with local system access to potentially read a subset of data accessible by the technology.

Detection Guidance

This vulnerability affects Oracle Outside In Technology version 8.5.8 and requires local access to the system where it executes. Detection may involve checking installed versions of Oracle Outside In Technology and monitoring for unauthorized data access attempts.

Impact Analysis

An attacker could exploit this to gain unauthorized read access to sensitive data processed by the Oracle Outside In Technology component, potentially leading to data leaks or privacy breaches.

Compliance Impact

This vulnerability could lead to unauthorized data access, which may violate GDPR (data protection) or HIPAA (health data privacy) requirements, depending on the data involved. Organizations using this technology should assess potential compliance risks.

Mitigation Strategies

Apply the latest security patches or updates from Oracle for Oracle Outside In Technology version 8.5.8 to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-91404. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...