Oracle Outside In Technology Multiple Security Vulnerabilities

Bugtraq ID:	105603
Class:	Unknown
CVE:	CVE-2018-3217 CVE-2018-3218 CVE-2018-3219 CVE-2018-3220 CVE-2018-3221 CVE-2018-3302 CVE-2018-3222 CVE-2018-3223 CVE-2018-3224 CVE-2018-3225 CVE-2018-3226 CVE-2018-3227 CVE-2018-3228 CVE-2018-3229 CVE-2018-3230 CVE-2018-3231 CVE-2018-3232 CVE-2018-3233 CVE-2018-3234 CVE-2018-18223 CVE-2018-18224 CVE-2018-3147
Remote:	Yes
Local:	No
Published:	Oct 16 2018 12:00AM
Updated:	Oct 16 2018 12:00AM
Credit:	Behzad Najjarpour Jabbari, Secunia Research at Flexera Software, and Kamlapati Choubey of Trend Micro's Zero Day Initiative.
Vulnerable:	Oracle Outside In Technology 8.5.3
Not Vulnerable:

Oracle Outside In Technology Multiple Security Vulnerabilities

Oracle Outside In Technology is prone to multiple security vulnerabilities.

These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Outside In Filters' component is affected.

Exploiting these issues could allow an attacker to perform unauthorized actions. This may aid in further attacks.

These vulnerabilities affect the following supported version:
8.5.3

Oracle Outside In Technology Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Outside In Technology Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Outside In Technology Multiple Security Vulnerabilities

References:

• Oracle Homepage (Oracle)
  
• Oracle Critical Patch Update Advisory - October 2018 (Oracle)