CVE-2017-10196
HighSummary
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently crashing Oracle Outside In Technology and unauthorized access to data.
Risk Assessment
The organization is at risk of attacks that can lead to complete service disruption (DoS) and unauthorized data operations, impacting the integrity and availability of the system.
Recommendation
It is recommended to update to the latest version of Oracle Fusion Middleware and implement appropriate security measures to restrict access to the Oracle Outside In Technology component.
Other vulnerabilities in Oracle Outside In Technology (Outside In Filters)
See all- CVE-2017-10141High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to denial of service (complete DOS) and unauthorized access to data.
- CVE-2017-3295High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can result in hanging or frequently repeatable crashes (complete DOS) of this technology.
- CVE-2017-3294High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows remote exploitation by an unauthenticated attacker. Versions 8.5.2 and 8.5.3 are vulnerable to attacks that can lead to hanging or frequently crashing (complete DOS) of Oracle Outside In Technology.
- CVE-2017-3293High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete some accessible data.
- CVE-2017-3271High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete data.
- CVE-2017-3270High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of this technology.
- CVE-2017-3269High
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Oracle Outside In Technology.
- CVE-2017-3268High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware, affecting versions 8.5.2 and 8.5.3, allows an unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Outside In Technology.
- CVE-2017-3267High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes of the software.
- CVE-2017-3266Critical
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Affected versions are 8.5.2 and 8.5.3.
Original NVD description (English source)
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data. CVSS 3.0 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).