CVE-2018-3095

CVE-2018-3095 is a vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically affecting version 8.5.3 of Outside In Filters. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the technology. Successful attacks require human interaction and can lead to unauthorized access to critical data, complete data access, and a partial denial of service. The vulnerability has a CVSS 3.0 Base Score of 7.1 (High), indicating significant confidentiality and availability impacts. The attack vector is network-based with low attack complexity, but user interaction is required. The CVSS score assumes data is passed directly over a network to Outside In Technology. Currently, there is no known active exploitation, nor is exploit code available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a large percentage of reported vulnerabilities.