CVE-2015-4878

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.9%

from disclosure to weapon33 days

Published on NVDOct 21

1st PoC+33d

exploitation probability

0.9%top 43% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4877.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/38789unverified cve_referencepacketstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.htmlunverified cve_referencewww.exploit-db.com/exploits/38789/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html https://www.exploit-db.com/exploits/38789/http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html http://www.securityfocus.com/archive/1/536762/100/0/threaded http://www.securityfocus.com/bid/77133 http://www.securitytracker.com/id/1033898