CVE-2021-35574: 
Oracle Communications CNC Policy vulnerability analysis and mitigation

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters), tracked as CVE-2021-35574. The vulnerability affects version 8.5.5 and was disclosed in October 2021. This is an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle Outside In Technology (Oracle Advisory).

The vulnerability has a CVSS 3.1 Base Score of 7.5 (High) with the vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The technical assessment indicates that the vulnerability is easily exploitable, requires no privileges or user interaction, and can be accessed remotely through HTTP protocol (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. The vulnerability specifically impacts the availability of the system, with no direct impact on confidentiality or integrity (Oracle Advisory).

Oracle released patches for this vulnerability in the October 2021 Critical Patch Update. The fix was later referenced in the April 2022 Critical Patch Update as well. Organizations using affected versions should apply the security patches as soon as possible (Oracle Advisory, Oracle April 2022).