CVE-2017-3268
HighSummary
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware, affecting versions 8.5.2 and 8.5.3, allows an unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Outside In Technology.
Risk Assessment
The organization is at risk of attacks that could lead to downtime of systems using Outside In technology, impacting service availability.
Recommendation
It is recommended to update to the latest version of Oracle Fusion Middleware and implement appropriate network security measures to restrict access to vulnerable components.
Other vulnerabilities in Oracle Outside In Technology (Outside In Filters)
See all- CVE-2017-10196High
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently crashing Oracle Outside In Technology and unauthorized access to data.
- CVE-2017-10141High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to denial of service (complete DOS) and unauthorized access to data.
- CVE-2017-3295High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can result in hanging or frequently repeatable crashes (complete DOS) of this technology.
- CVE-2017-3294High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows remote exploitation by an unauthenticated attacker. Versions 8.5.2 and 8.5.3 are vulnerable to attacks that can lead to hanging or frequently crashing (complete DOS) of Oracle Outside In Technology.
- CVE-2017-3293High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete some accessible data.
- CVE-2017-3271High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete data.
- CVE-2017-3270High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of this technology.
- CVE-2017-3269High
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Oracle Outside In Technology.
- CVE-2017-3267High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes of the software.
- CVE-2017-3266Critical
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Affected versions are 8.5.2 and 8.5.3.
Original NVD description (English source)
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 7.5 (Availability impacts).