Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2015-4877 — Oracle Fusion Middleware vulnerability

4 documents4 sources

Severity

1.5LOWNVD

EPSS

0.4%

top 41.36%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Oracle Fusion Middleware

Timeline

PublishedOct 21

Latest updateMay 14

Description

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878.

CVSS vector

AV:L/AC:M/C:N/I:N/A:PExploitability: 2.7 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/fusion_middleware8.5.0, 8.5.1, 8.5.2+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-rrxx-xr46-4hv7: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8↗2022-05-14

▶

CVEList

CVE-2015-4877: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8↗2015-10-21

▶

💥Exploits & PoCs

Exploit-DB

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption (1)↗2015-11-23

▶