Vulnerability in Oracle Outside In Technology Affecting Fusion Middleware

CVE-2021-35572

Summary

This vulnerability in Oracle's Outside In Technology allows unauthenticated attackers with network access to exploit the system via HTTP. If successful, an attacker may cause the Outside In Technology to hang or crash, resulting in a denial of service (DoS) condition. Outside In Technology, consisting of various software development kits, may experience significant availability impacts when used with software that directly passes network-received data. The risk is particularly heightened in scenarios where data is relayed without proper validation.

References