Oracle Outside In Technology vulnerabilities

199 CVEs affecting Oracle Outside In Technology, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-60414, published 2026-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-2992, published 2018-07-18. High severity, CVSS 7.1. EPSS: 35.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3. Easily exploitable…
CVE-2011-4517, published 2011-12-15. Medium severity, CVSS 6.8. EPSS: 10.5% chance of exploitation in the next 30 days. The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer…
CVE-2011-4516, published 2011-12-15. Medium severity, CVSS 6.8. EPSS: 10.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2020-11656, published 2020-04-09. Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days. In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
CVE-2015-6015, published 2016-01-22. High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to…
CVE-2015-6014, published 2016-01-22. High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to…
CVE-2015-6013, published 2016-01-22. High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to…
CVE-2021-40690, published 2021-09-19. High severity, CVSS 7.5. EPSS: 7.4% chance of exploitation in the next 30 days. All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from…
CVE-2018-20843, published 2019-06-24. High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days. In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing…
CVE-2020-6851, published 2020-01-13. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

Latest

CVE-2026-60414, published 2026-08-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability…
CVE-2026-60413, published 2026-08-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability…
CVE-2026-60412, published 2026-08-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability…
CVE-2026-60392, published 2026-08-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. Easily exploitable…
CVE-2024-21120, published 2024-04-16. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable…
CVE-2024-21119, published 2024-04-16. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable…
CVE-2024-21118, published 2024-04-16. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable…
CVE-2024-21117, published 2024-04-16. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable…
CVE-2024-20930, published 2024-01-16. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK). The supported version that…
CVE-2023-22127, published 2023-10-17. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK). The supported version that…