CVE-2019-2971

CVE-2019-2971 is a vulnerability in Oracle Outside In Technology, specifically affecting version 8.5.4 of the Outside In Filters component within Oracle Fusion Middleware. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the affected software. Successful attacks can lead to unauthorized data modification (update, insert, delete), unauthorized read access to a subset of data, and a partial denial of service. The vulnerability has a CVSS v3.0 Base Score of 7.3 (High), indicating significant impacts on confidentiality, integrity, and availability. Its attack vector is network-based with low attack complexity, requiring no user interaction or privileges. The CVSS score assumes network-received data is passed directly to the Outside In Technology code. Currently, there is no public exploit intelligence available, with no Metasploit modules, Nuclei templates, or ExploitDB entries. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant public attention or active exploitation.