CVE-2017-3267: Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outs...

Security readout for executives and security teams

This flaw can let an unauthenticated network attacker make affected Oracle Outside In Technology components hang or repeatedly crash. The business impact is service disruption, not confirmed data theft or code execution. Risk is highest where applications expose document or content processing over HTTP. Exposure depends on where Outside In Technology is embedded. Internet-facing or internal HTTP services that accept untrusted files or content and pass them to affected OIT filters are the likely concern. Systems not receiving network data may have lower practical risk. Prioritize remediation for exposed document-processing services because exploitation can create repeatable outages without authentication. Treat isolated or non-networked uses as lower urgency after confirming the data path. Mitigation focus: Follow Oracle January 2017 Critical Patch Update guidance for Outside In Technology.; Inventory applications embedding Outside In Technology 8.5.2 or 8.5.3.; Prioritize exposed HTTP content-processing paths accepting untrusted input..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.