CVE-2015-4877

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.9%

from disclosure to weapon33 days

Published on NVDOct 21

1st PoC+33d

exploitation probability

0.9%top 44% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/38788unverified cve_referencepacketstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.htmlunverified cve_referencewww.exploit-db.com/exploits/38788/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html https://www.exploit-db.com/exploits/38788/http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html http://www.securityfocus.com/archive/1/536762/100/0/threaded http://www.securityfocus.com/bid/77130 http://www.securitytracker.com/id/1033898