Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Oracle Outside In Technology can be remotely compromised

CVE-2019-2460 · published 7 years ago
Summary

Version 8.5.3 of Oracle Outside In Technology may let an unauthenticated attacker on the network take control of the component. The attacker could cause a partial interruption of service. Apply the latest security update from Oracle and limit network access to the component wherever possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle outside_in_technology 8.5.3
cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*
Original advisory text
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3. Easily exploitable vulne...
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published16 Jan 2019
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-2460 · NVD
Track software like this
Free during beta