Fusion Middleware (Oracle) - vulnerabilities (CVEs)

313 CVEs, 0 in the last 30 days, 128 known versions, newest CVE from 2026-04-21. Vendor: Oracle.

CVEs of Fusion Middleware

CVE-2026-35252 - CVSS 6.4 (medium), 2026-04-21: Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API). Supported versions that are affected are…
CVE-2026-35232 - CVSS 5.4 (medium), 2026-04-21: Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily…
CVE-2024-21215 - CVSS 7.5 (high), 2024-10-15: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…
CVE-2024-21205 - CVSS 6.5 (medium), 2024-10-15: Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality). The supported version that is affected is…
CVE-2024-21192 - CVSS 4.4 (medium), 2024-10-15: Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion Middleware (component: WebLogic Mgmt). The supported version…
CVE-2024-21191 - CVSS 7.6 (high), 2024-10-15: Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware (component: FMW Control Plugin). The supported…
CVE-2024-21190 - CVSS 7.5 (high), 2024-10-15: Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware (component: Cloning). The supported version that is…
CVE-2023-21994 - CVSS 6.5 (medium), 2023-07-18: Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component: Android Mobile Authenticator App). Supported versions that…
CVE-2021-2351 - CVSS 8.3 (high), 2021-07-21: Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c.…
CVE-2020-5421 - CVSS 8.7 (high), 2020-09-19: In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD…
CVE-2020-10683 - CVSS 9.8 (critical), 2020-05-01: dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular…
CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
CVE-2019-10086 - CVSS 7.3 (high), 2019-08-20: In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader…
CVE-2018-3109 - CVSS 6.5 (medium), 2018-08-02: Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are…
CVE-2018-3108 - CVSS 6.5 (medium), 2018-08-02: Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification Service). Supported versions that are…
CVE-2018-1304 - CVSS 5.9 (medium), 2018-02-28: The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27,…
CVE-2018-1305 - CVSS 6.5 (medium), 2018-02-23: Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only…
CVE-2016-0470 - CVSS 5.5 (medium), 2016-01-21: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated…
CVE-2016-0464 - CVSS 4.3 (medium), 2016-01-21: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect…
CVE-2016-0453 - CVSS 1.8 (low), 2016-01-21: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown…
CVE-2016-0441 - CVSS 6.8 (medium), 2016-01-21: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect…
CVE-2016-0439 - CVSS 5 (medium), 2016-01-21: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality…
CVE-2016-0433 - CVSS 4.3 (medium), 2016-01-21: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors…
CVE-2016-0432 - CVSS 1.9 (low), 2016-01-21: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect…
CVE-2016-0430 - CVSS 4.3 (medium), 2016-01-21: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality…
CVE-2016-0429 - CVSS 4.3 (medium), 2016-01-21: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect…
CVE-2016-0413 - CVSS 4 (medium), 2016-01-21: Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect…
CVE-2016-0404 - CVSS 4.3 (medium), 2016-01-21: Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via…
CVE-2016-0401 - CVSS 4.3 (medium), 2016-01-21: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect…
CVE-2015-4808 - CVSS 1.9 (low), 2016-01-21: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect…
CVE-2015-4914 - CVSS 3.5 (low), 2015-10-22: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote…
CVE-2015-4912 - CVSS 4.3 (medium), 2015-10-22: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect…
CVE-2015-4909 - CVSS 5 (medium), 2015-10-22: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to…
CVE-2015-4899 - CVSS 4.3 (medium), 2015-10-21: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect…
CVE-2015-4880 - CVSS 4.3 (medium), 2015-10-21: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via…
CVE-2015-4878 - CVSS 1.5 (low), 2015-10-21: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect…
CVE-2015-4877 - CVSS 1.5 (low), 2015-10-21: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect…
CVE-2015-4867 - CVSS 4.3 (medium), 2015-10-21: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via…
CVE-2015-4838 - CVSS 4 (medium), 2015-10-21: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated…
CVE-2015-4832 - CVSS 4.3 (medium), 2015-10-21: Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3 allows remote attackers to…
CVE-2015-4812 - CVSS 2.6 (low), 2015-10-21: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.9 allows remote attackers to affect confidentiality via…
CVE-2015-4811 - CVSS 1.5 (low), 2015-10-21: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect…
CVE-2015-4809 - CVSS 1.5 (low), 2015-10-21: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect…
CVE-2015-4799 - CVSS 4.3 (medium), 2015-10-21: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.1, and 11.1.1.8.0 allows remote attackers to…
CVE-2015-1829 - CVSS 5 (medium), 2015-10-21: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote…
CVE-2014-3576 - CVSS 7.5 (high), 2015-08-14: The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service…
CVE-2015-4759 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-4758 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-4751 - CVSS 5 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect…
CVE-2015-4747 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote attackers to affect…
CVE-2015-4745 - CVSS 7.5 (high), 2015-07-16: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote…
CVE-2015-4744 - CVSS 2.6 (low), 2015-07-16: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server…
CVE-2015-4742 - CVSS 5 (medium), 2015-07-16: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote…
CVE-2015-2658 - CVSS 5 (medium), 2015-07-16: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors…
CVE-2015-2636 - CVSS 7.5 (high), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-2635 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-2634 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-2623 - CVSS 4.3 (medium), 2015-07-16: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in…
CVE-2015-2606 - CVSS 7.5 (high), 2015-07-16: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote…
CVE-2015-2605 - CVSS 7.5 (high), 2015-07-16: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote…
CVE-2015-2604 - CVSS 7.5 (high), 2015-07-16: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote…
CVE-2015-2603 - CVSS 7.5 (high), 2015-07-16: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote…
CVE-2015-2602 - CVSS 7.5 (high), 2015-07-16: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote…
CVE-2015-2598 - CVSS 3.5 (low), 2015-07-16: Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 (11.6.39) allows…
CVE-2015-2593 - CVSS 7.1 (high), 2015-07-16: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect…
CVE-2015-1926 - CVSS 5.5 (medium), 2015-07-16: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications…
CVE-2015-0446 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-0445 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-0444 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-0443 - CVSS 6.8 (medium), 2015-07-16: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality,…
CVE-2015-0493 - CVSS 1.5 (low), 2015-04-16: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect…
CVE-2015-0482 - CVSS 6 (medium), 2015-04-16: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.2.0 and 12.1.3.0 allows remote authenticated users to…
CVE-2015-0474 - CVSS 1.5 (low), 2015-04-16: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect…
CVE-2015-0461 - CVSS 7 (high), 2015-04-16: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect…
CVE-2015-0456 - CVSS 4.3 (medium), 2015-04-16: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via…
CVE-2015-0451 - CVSS 3.5 (low), 2015-04-16: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 3.0-04 allows remote authenticated users to affect confidentiality via…
CVE-2015-0450 - CVSS 4.3 (medium), 2015-04-16: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via…
CVE-2015-0449 - CVSS 5 (medium), 2015-04-16: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to…
CVE-2015-0434 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote…
CVE-2015-0420 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Forms component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect confidentiality…
CVE-2015-0414 - CVSS 3.5 (low), 2015-01-21: Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote authenticated users to affect…
CVE-2015-0401 - CVSS 4 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated…
CVE-2015-0399 - CVSS 4 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote…
CVE-2015-0396 - CVSS 7.5 (high), 2015-01-21: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect…
CVE-2015-0389 - CVSS 3.5 (low), 2015-01-21: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect…
CVE-2015-0386 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect…
CVE-2015-0376 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via…
CVE-2015-0372 - CVSS 5 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality…
CVE-2015-0367 - CVSS 5 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote…
CVE-2015-0362 - CVSS 5 (medium), 2015-01-21: Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect…
CVE-2014-6592 - CVSS 3.5 (low), 2015-01-21: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect…
CVE-2014-6580 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect…
CVE-2014-6576 - CVSS 5.5 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote…
CVE-2014-6571 - CVSS 6.8 (medium), 2015-01-21: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect…
CVE-2014-6569 - CVSS 5 (medium), 2015-01-21: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote…
CVE-2014-6548 - CVSS 4.6 (medium), 2015-01-21: Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and…
CVE-2014-6526 - CVSS 4.3 (medium), 2015-01-21: Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect…
CVE-2014-0191 - CVSS 4.3 (medium), 2015-01-21: The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware…
CVE-2014-6553 - CVSS 6.4 (medium), 2014-10-15: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote attackers to affect…
CVE-2014-6552 - CVSS 4.3 (medium), 2014-10-15: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote…