CVE-2018-3220

CVE-2018-3220 is a vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically affecting versions 8.5.3 and 8.5.4 of Outside In Filters. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the software. Successful attacks require user interaction and can lead to unauthorized access to critical or all accessible data, along with a partial denial of service. The vulnerability has a CVSS 3.0 Base Score of 7.1 (High), indicating significant confidentiality and availability impacts. The attack vector is network-based, with low attack complexity, but requires user interaction. While the EPSS score is low, suggesting a lower likelihood of exploitation, the FAUCET Risk Score is 51/100. There is currently no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Furthermore, there is no community discussion or media coverage surrounding this CVE, suggesting a lack of widespread attention or exploitation.