Vulnerability in Oracle Outside In Technology
CVE-2015-6013
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted WK4 file.
EPSS: 0.084 (94.4th percentile) — read the EPSS interpretation.
Affected products
- Oracle Outside_in_technology — versions 8.5.0, 8.5.1, 8.5.2
- N/a — versions n/a
Public proof-of-concept exploits
References
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2015-6013?
- CVE-2015-6013 is a vulnerability in Oracle Outside In Technology. Published 2016-01-22.
- Is CVE-2015-6013 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.