Live › vulnerability › CVE-2026-87393
Go to dashboardOracle Outside In Technology 8.5.8 has a flaw that lets an unauthenticated network attacker send content over HTTP that hangs or repeatedly crashes the library. The impact is denial of service, with no data read or code run according to the sources.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run Oracle Fusion Middleware products embedding Outside In Technology 8.5.8 and accept HTTP uploads or content that is parsed with it. The sources do not name the exact products or configurations that expose it, so exposure beyond the listed version is unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-87393")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.