CVE-2016-3575
published 2016-07-21CVE-2016-3575: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect…
PriorityP354high8.6CVSS 3.0
AVNACLPRNUINSUCHILAL
EPSS
3.93%
89.3th percentile
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | outside_in_technology | — | — |
| oracle | outside_in_technology | — | — |
| oracle | outside_in_technology | — | — |
CVSS provenance
nvdv3.08.6HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
nvdv2.09.0CRITICALAV:N/AC:L/Au:N/C:C/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w8jm-2pjg-crgm: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3579 [HIGH] GHSA-w8jm-2pjg-crgm: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-w834-gwrj-xg32: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3592 [HIGH] GHSA-w834-gwrj-xg32: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-mqmv-r2ff-52p4: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3577 [HIGH] GHSA-mqmv-r2ff-52p4: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-pj99-6wr4-8m6g: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3596 [HIGH] GHSA-pj99-6wr4-8m6g: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, and CVE-2016-3595.
GHSA
GHSA-vc66-rc7w-rcmm: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3578 [HIGH] GHSA-vc66-rc7w-rcmm: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-82pp-fm77-3v8w: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3576 [HIGH] GHSA-82pp-fm77-3v8w: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-vm9x-pwp3-8h2g: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3591 [HIGH] GHSA-vm9x-pwp3-8h2g: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-9v7c-gwvw-2723: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3581 [HIGH] GHSA-9v7c-gwvw-2723: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-363v-qrh4-66cf: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3594 [HIGH] GHSA-363v-qrh4-66cf: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-48gf-9cxf-87rc: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3580 [HIGH] GHSA-48gf-9cxf-87rc: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-fgx9-57q8-qq42: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3595 [HIGH] GHSA-fgx9-57q8-qq42: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, and CVE-2016-3596.
GHSA
GHSA-978g-7r32-xrm4: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3575 [HIGH] GHSA-978g-7r32-xrm4: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-mhmm-5rx6-2789: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3583 [HIGH] GHSA-mhmm-5rx6-2789: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-p3w4-j8qj-9757: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3582 [HIGH] GHSA-p3w4-j8qj-9757: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-6gvq-rv4x-m4q2: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3593 [HIGH] GHSA-6gvq-rv4x-m4q2: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-pphm-cvfc-fmxr: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3574 [HIGH] GHSA-pphm-cvfc-fmxr: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
GHSA
GHSA-vw6g-4q8r-g8qr: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17·CVSS 8.6
CVE-2016-3590 [HIGH] GHSA-vw6g-4q8r-g8qr: Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Oracle's Outside In Technology, Turned Inside-Out
blogs_talos·2016-07-20
Vulnerability Spotlight: Oracle's Outside In Technology, Turned Inside-Out
Vulnerabilities discovered by Aleksandar Nikolic. Blog post authored by Jaeson Schultz and Aleksandar Nikolic.
One of the most fundamental tasks performed by many software programs involves the reading, writing, and general processing of files. In today's highly networked environments, files and the programs that process them can be found just about everywhere: FTP transfers, HTTP form uploads, email attachments, et cetera.
Because computer users interact with files of so many different varieties on such a regular basis, Oracle Corporation has designed tools to assist programmers with writing software that will support these everyday tasks: Outside In Technology (OIT). From the OIT website: "Outside In Technology is a suite of software development kits (SDKs) that provides developers wit
Talos
Vulnerability Spotlight: Oracle's Outside In Technology, Turned Inside-Out
blogs_talos·2016-07-20
Vulnerability Spotlight: Oracle's Outside In Technology, Turned Inside-Out
## Vulnerability Spotlight: Oracle's Outside In Technology, Turned Inside-Out
Vulnerabilities discovered by Aleksandar Nikolic. Blog post authored by Jaeson Schultz and Aleksandar Nikolic.
One of the most fundamental tasks performed by many software programs involves the reading, writing, and general processing of files. In today's highly networked environments, files and the programs that process them can be found just about everywhere: FTP transfers, HTTP form uploads, email attachments, et cetera.
Because computer users interact with files of so many different varieties on such a regular basis, Oracle Corporation has designed tools to assist programmers with writing software that will support these everyday tasks: Outside In Technology (OIT) . From the OIT website: "Outside In Techno
http://www-01.ibm.com/support/docview.wss?uid=swg21988009http://www-01.ibm.com/support/docview.wss?uid=swg21988718http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlhttp://www.securityfocus.com/bid/91787http://www.securityfocus.com/bid/91921http://www.securitytracker.com/id/1036370http://www-01.ibm.com/support/docview.wss?uid=swg21988009http://www-01.ibm.com/support/docview.wss?uid=swg21988718http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlhttp://www.securityfocus.com/bid/91787http://www.securityfocus.com/bid/91921http://www.securitytracker.com/id/1036370
2016-07-21
Published