The Oracle Outside In Technology product suffers from an easily exploitable weakness in the Outside In Clean Content SDK. A low‑privileged user who has logged onto the infrastructure where the product runs can compromise the software, gain unauthorized ability to create, delete, or modify critical data, and also cause a partial denial of service. The vulnerability has a CVSS v3.1 base score of 6.1, with high integrity impact and low availability impact.

Oracle Outside In Technology version 8.5.8 is affected. The flaw resides in the Clean Content SDK component.

This flaw is not remotely reachable; it requires local access or at least an attacker who can log onto the host that runs Outside In. As the CVSS score is 6.1 and the EPSS score is unavailable, the overall risk is moderate. The vulnerability is not listed in CISA’s KEV catalog, but internal attackers can leverage it to alter or delete data and interrupt services, making it a priority for internal remediation if the affected version is in use.