CVE-2026-91343

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Clean Content SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outsid...

CVE-2026-91340

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Clean Content SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Outside...

CVE-2026-91342

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Clean Content SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outsid...

CVE-2026-91475

A vulnerability exists in the Oracle Outside In Technology product (component: Outside In Clean Content SDK ) of Oracle Fusion Middleware , specifically affecting version 8.5.8 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the pro...

CVE-2026-91355

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with local access to the infrastructure where the software executes can exploit this vulnerabilit...

CVE-2026-91354

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (specifically version 8.5.8 ) within Oracle Fusion Middleware. A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Due to a s...

CVE-2026-91353

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product, specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the technology, potentially resulting in una...

CVE-2026-91352

A vulnerability exists in the Outside In Clean Content SDK component of Oracle Outside In Technology (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a partial denial of serv...

CVE-2026-91350

A vulnerability exists in the Oracle Outside In Technology product of Oracle Fusion Middleware , specifically within the Outside In Clean Content SDK component in version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a hang or a frequentl...

CVE-2026-91351

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit thi...

CVE-2026-91349

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a frequently repeata...

CVE-2026-91344

The Oracle Outside In Technology product, specifically the Outside In Clean Content SDK component within Oracle Fusion Middleware, is vulnerable in version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a hang or a frequently repeatable cr...

CVE-2026-91345

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware , specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a freq...

CVE-2026-91346

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw, though it requires human interaction from a user other than the attacker....

CVE-2026-91341

A critical vulnerability exists in the Outside In Clean Content SDK component of Oracle Fusion Middleware (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data, allowing for the creation, deletion...

CVE-2026-91342

The Outside In Clean Content SDK component of the Oracle Fusion Middleware product (version 8.5.8 ) is vulnerable to a security flaw. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Outside In Technology . While the attack requires huma...

CVE-2026-91343

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the technology, potenti...

CVE-2026-91340

A vulnerability exists in the Outside In Clean Content SDK component of Oracle Fusion Middleware (specifically affecting version 8.5.8 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Outside In Technology product, potentially leading to a f...

Missing Authentication for Critical Function

Overview @apostrophecms/import-export is an Import Export Documents for ApostropheCMS Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to missing authentication and authorization checks in the POST /api/v1/@apostrophecms/import-export/clean-expo...

CVE-2026-113648

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST /api/v1/@apostrophecms/import-export/clean-export in @apostrophecms/import-export lacks authentication and authorization checks. Any client—including unauthenticate...