CVE-2017-3294
HighSummary
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows remote exploitation by an unauthenticated attacker. Versions 8.5.2 and 8.5.3 are vulnerable to attacks that can lead to hanging or frequently crashing (complete DOS) of Oracle Outside In Technology.
Risk Assessment
An attacker with network access can easily exploit this vulnerability, leading to significant disruptions in system operation. This may result in loss of service availability and impact organizational operations.
Recommendation
It is recommended to update to the latest version of Oracle Fusion Middleware to mitigate this vulnerability. Additionally, consider restricting access to the Oracle Outside In Technology component from the network.
Other vulnerabilities in Oracle Outside In Technology (Outside In Filters)
See all- CVE-2017-10196High
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently crashing Oracle Outside In Technology and unauthorized access to data.
- CVE-2017-10141High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to denial of service (complete DOS) and unauthorized access to data.
- CVE-2017-3295High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can result in hanging or frequently repeatable crashes (complete DOS) of this technology.
- CVE-2017-3293High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete some accessible data.
- CVE-2017-3271High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete data.
- CVE-2017-3270High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of this technology.
- CVE-2017-3269High
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Oracle Outside In Technology.
- CVE-2017-3268High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware, affecting versions 8.5.2 and 8.5.3, allows an unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Outside In Technology.
- CVE-2017-3267High
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes of the software.
- CVE-2017-3266Critical
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Affected versions are 8.5.2 and 8.5.3.
Original NVD description (English source)
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 7.5 (Availability impacts).