Vulnerability in Oracle Outside In Technology for Oracle Fusion Middleware

CVE-2019-2853

Summary

The vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware allows unauthenticated attackers with HTTP access to compromise the system. This can result in unauthorized modifications, including updates, inserts, or deletions to sensitive data, as well as unauthorized read access to specific subsets of data. Additionally, the vulnerability may enable attackers to partially disrupt service, leading to a denial of service scenario. The risk associated with this vulnerability depends on the way data is transferred to the Outside In Technology, specifically whether it originates from the network.

References