Improper input validation in Oracle Outside In Technology - CVE-2026-91351
Published: November 10, 2026
Vulnerability identifier: #VU163722
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-91351
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local authenticated user to modify data and cause limited service disruption.
The vulnerability exists due to improper input validation within the Outside In Clean Content SDK component in Oracle Outside In Technology. A local authenticated user can exploit this vulnerability to modify data and cause limited service disruption.
Affected software
Oracle Outside In Technology
How to mitigate CVE-2026-91351
Install updates from vendor's website.