Vulnerability record · CVE-2015-6013 · published 22 January 2016

CVE-2015-6013: Oracle outside in technology vulnerability

Oracle · Outside In Technology

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted WK4 file.

10.0 CVSS 2.0 High EPSS 8.4% · top 5.2%

10.0CVSS 2.0 base score

8.4%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References

17 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Outside In Technology Oracle

References

Link	Tags
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	Vendor Advisory
http://www.securityfocus.com/bid/81227
http://www.securitytracker.com/id/1034711
https://www.kb.cert.org/vuls/id/916896	Third Party AdvisoryUS Government Resource
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	Vendor Advisory
http://www.securityfocus.com/bid/81227
http://www.securitytracker.com/id/1034711
https://www.kb.cert.org/vuls/id/916896	Third Party AdvisoryUS Government Resource

Track CVE-2015-6013 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-6015Oracle outside in technology vulnerabilityUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to aff…EPSS 8.4%22 Jan 2016 10.0CVE-2015-6014Oracle outside in technology vulnerabilityUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to aff…EPSS 8.4%22 Jan 2016 9.8CVE-2020-11656Sqlite use after free vulnerabilityIn SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELEC…EPSS 7.6%9 Apr 2020 9.8CVE-2016-10328Freetype out-of-bounds write vulnerabilityFreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse…EPSS 3.7%14 Apr 2017 9.8CVE-2017-3266Oracle outside in technology vulnerabilityVulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that a…EPSS 2.8%27 Jan 2017 8.6CVE-2021-2066Oracle outside in technology vulnerabilityVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that are af…EPSS 1.4%20 Jan 2021 8.6CVE-2021-2067Oracle outside in technology vulnerabilityVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that are af…EPSS 1.4%20 Jan 2021 8.6CVE-2021-2068Oracle outside in technology vulnerabilityVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that are af…EPSS 1.4%20 Jan 2021

Source: NIST National Vulnerability Database (record CVE-2015-6013), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.