Home→Vulnerabilities→CVE-2021-35661
Disclosed

CVE-2021-35661

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and

Share this vulnerability:

Exploitation Probability (EPSS)

Low Priority
1.55%

The Exploit Prediction Scoring System (EPSS) uses machine learning to estimate the probability that a vulnerability will be exploited in the wild within the next 30 days.

0% (Theoretical)100% (Certainty)

7-Day Exploitation Trend

Vulnerability Timeline

2 events
Oct 20, 2021
Vulnerability Disclosed
Published to component-level vulnerability database.
Oct 26, 2021
Last Updated
Record updated with new analysis or tags.

Threat Actor Attribution

PREMIUM INTEL
Associated Groups:Lazarus Group, APT28
Ransomware Campaigns:LockBit 3.0, BlackCat
IoCs (Indicators):14 IPs, 3 Hashes

Remediation & Mitigation

SOLUTION

Official patches and mitigation steps are available for this vulnerability.

# Update Command
apt-get update && apt-get upgrade -y specific-package
# Verify installation
dpkg -l | grep package-name

Affected Products

1 Total
oracle/outside_in_technology8.5.5

References

https://www.oracle.com/security-alerts/cpuoct2021.htmlOracle
PatchVendor Advisory

Am I Vulnerable?

Check your domain or package.json for CVE-2021-35661 exposure.

Share This Page

Help others discover this vulnerability information

Vulnerability Details

CVSS Base Score
7.5/ 10
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published Date
Oct 20, 2021
Last Modified
Oct 26, 2021
Need API Access?

Integrate this data into your SOAR platform.

View Plans →
Need Manual Validation?

Automated scanners flag false positives. Get a manual pentest validation for this CVE.