VDB

OSA-38944733

OSA-38944733 PUBLISHED CVSS 7.800000190734863 HIGH

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: DC-Specific Component (LibExpat)). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in takeover of Oracle Outside In Technology. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
OracleOracle Financial Services Behavior Detection Platform Version 8.1.2.10Oracle Financial Services Behavior Detection Platform Version 8.1.2.10, Oracle Financial Services Behavior Detection Platform Version 8.1.2.10
OracleOracle Outside In Technology Version 8.5.8Oracle Outside In Technology Version 8.5.8, Oracle Outside In Technology Version 8.5.8
OracleOracle Communications Unified Assurance Version 6.1.1-7.0.0Oracle Communications Unified Assurance Version 6.1.1-7.0.0, Oracle Communications Unified Assurance Version 6.1.1-7.0.0
OracleOracle Financial Services Behavior Detection Platform Version 8.1.2.11Oracle Financial Services Behavior Detection Platform Version 8.1.2.11, Oracle Financial Services Behavior Detection Platform Version 8.1.2.11
OracleOracle Financial Services Behavior Detection Platform Version 8.0.8.1Oracle Financial Services Behavior Detection Platform Version 8.0.8.1, Oracle Financial Services Behavior Detection Platform Version 8.0.8.1
OracleOracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Version 8.0.8Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Version 8.0.8, Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Version 8.0.8

Timeline

  • Apr 24, 2026 CVE Published
Open in Interactive Console →
$ Console Community · 50/day Open console ›