CVE-2018-3092

CVE-2018-3092 is a vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically affecting version 8.5.3 of Outside In Filters. This easily exploitable vulnerability allows an unauthenticated attacker to compromise the technology via HTTP, requiring user interaction. Successful attacks can lead to unauthorized access to critical data or all accessible data, and a partial denial of service. The vulnerability has a CVSS 3.0 Base Score of 7.1 (High), indicating significant confidentiality and availability impacts. The attack vector is network-based with low attack complexity, but it does require user interaction (UI:R). The CVSS score assumes network data is passed directly to the Outside In Technology code. Currently, there is no known active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a large percentage of reported vulnerabilities.