{"api_version":"1","generated_at":"2026-07-23T10:15:50+00:00","cve":"CVE-2015-4877","urls":{"html":"https://cve.report/CVE-2015-4877","api":"https://cve.report/api/cve/CVE-2015-4877.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-4877","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-4877"},"summary":{"title":"CVE-2015-4877","description":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878.","state":"PUBLISHED","assigner":"oracle","published_at":"2015-10-21 23:59:41","updated_at":"2026-05-06 22:30:45"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"1.5","severity":"","vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:N/I:N/A:P","baseScore":1.5,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/536762/100/0/threaded","name":"http://www.securityfocus.com/archive/1/536762/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/77130","name":"http://www.securityfocus.com/bid/77130","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Fusion Middleware CVE-2015-4877 Local Security Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","name":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Oracle Critical Patch Update - October 2015","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html","name":"http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Outside In Buffer Overflow ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id/1033898","name":"http://www.securitytracker.com/id/1033898","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Fusion Middleware Bugs Let Remote Users Access and Modify Data and Remote and Local Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/38788/","name":"https://www.exploit-db.com/exploits/38788/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption (1) - Windows dos Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4877","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4877","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"4877","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"8.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"4877","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"8.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"4877","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"fusion_middleware","cpe6":"8.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T06:25:21.945Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20151026 Secunia Research: Oracle Outside In Two Buffer Overflow Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/536762/100/0/threaded"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"},{"name":"38788","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/38788/"},{"name":"1033898","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1033898"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html"},{"name":"77130","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/77130"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-10-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-09T18:57:01.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"20151026 Secunia Research: Oracle Outside In Two Buffer Overflow Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/536762/100/0/threaded"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"},{"name":"38788","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/38788/"},{"name":"1033898","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1033898"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html"},{"name":"77130","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/77130"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2015-4877","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20151026 Secunia Research: Oracle Outside In Two Buffer Overflow Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/536762/100/0/threaded"},{"name":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"},{"name":"38788","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/38788/"},{"name":"1033898","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1033898"},{"name":"http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html"},{"name":"77130","refsource":"BID","url":"http://www.securityfocus.com/bid/77130"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2015-4877","datePublished":"2015-10-21T23:00:00.000Z","dateReserved":"2015-06-24T00:00:00.000Z","dateUpdated":"2024-08-06T06:25:21.945Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-10-21 23:59:41","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:N/I:N/A:P","baseScore":1.5,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":2.7,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C3A4ADEC-E47F-4D97-8383-F8DB8D887BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"58B057A1-D390-40E9-B494-C4FA62FAEF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:8.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4B13AFD4-1F38-497D-B924-52CE17D90C9B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"4877","Ordinal":"1","Title":"CVE-2015-4877","CVE":"CVE-2015-4877","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"4877","Ordinal":"1","NoteData":"Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878.","Type":"Description","Title":"CVE-2015-4877"},{"CveYear":"2015","CveId":"4877","Ordinal":"2","NoteData":"2015-10-21","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"4877","Ordinal":"3","NoteData":"2018-10-09","Type":"Other","Title":"Modified"}]}}}