Live › vulnerability › CVE-2026-87394
Go to dashboardOracle Outside In, a document-parsing library in Oracle Fusion Middleware, has a flaw reachable over HTTP without authentication. An attacker can read critical data accessible to the library and cause a partial denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that run Oracle Outside In 8.5.8 and expose its document processing over HTTP are affected, since the attack needs no login and no user action. Teams that do not run Oracle Fusion Middleware or Outside In can skip it.
No product ranges from the sources yet.
8.5.8.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).
This page as .md · .json · in your agent: get_signal("CVE-2026-87394")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.