CVE-2019-2764

CVE-2019-2764 is a vulnerability in Oracle Outside In Technology, specifically the Outside In Filters subcomponent (version 8.5.4). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the technology. Successful exploitation can lead to unauthorized data modification (update, insert, delete), unauthorized read access to a subset of data, and a partial denial of service. The vulnerability has a CVSS 3.0 Base Score of 7.3 (HIGH), indicating significant impacts on confidentiality, integrity, and availability. Its attack vector is network-based with low attack complexity, requiring no user interaction or privileges. The CVSS score assumes direct network data passing to Outside In Technology code, with potential for a lower score if data is not received over a network. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.