The vulnerability resides in the Oracle Outside In Technology product, specifically the Outside In PDF Export SDK component. It is classified as a high‑impact flaw that can be exploited by an unauthenticated attacker over HTTP. If successfully exploited, an adversary can take over the Oracle Outside In Technology instance, leading to complete loss of confidentiality, integrity, and availability of the product. The CVSS 3.1 base score of 7.5 reflects significant damage potential, with all three core assets impacted. Although the exploit is difficult and requires some human interaction, the consequences of a successful attack are severe.

Oracle Corporation’s Oracle Outside In Technology, version 8.5.8, is affected. No other product versions are listed as vulnerable in the available data.

The CVSS vector indicates an attack accessible via the network (AV:N) with high complexity (AC:H), no privileges (PR:N) and user interaction required (UI:R). Based on the description, it is inferred that the attacker must initiate traffic against the HTTP interface and then supply a malicious payload, which an end user or other participant must process or approve to complete the compromise. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that widespread exploitation is currently unlikely, but the high impact warrants proactive mitigation.