Oracle Fusion Middleware vulnerabilities
312 known vulnerabilities affecting oracle/fusion_middleware.
Total CVEs
312
CISA KEV
3
actively exploited
Public exploits
30
Exploited in wild
5
Severity breakdown
CRITICAL7HIGH29MEDIUM209LOW67
Vulnerabilities
Page 13 of 16
CVE-2014-2425P4MEDIUMCVSS 4.0v8.02014-04-16
CVE-2014-2425 [MEDIUM] CVE-2014-2425: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 P
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2016-0413P4MEDIUMCVSS 4.0v11.1.1.72016-01-21
CVE-2016-0413 [MEDIUM] CVE-2016-0413: Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11
Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support.
nvd
CVE-2015-0399P4MEDIUMCVSS 4.0v10.1.3.4.2v11.1.1.7.02015-01-21
CVE-2015-0399 [MEDIUM] CVE-2015-0399: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General.
nvd
CVE-2015-0401P4MEDIUMCVSS 4.0v7.0v11.1.1.7.02015-01-21
CVE-2015-0401 [MEDIUM] CVE-2015-0401: Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusi
Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console.
nvd
CVE-2014-6534P4MEDIUMCVSS 4.0v10.0.2v10.3.6+3 more2014-10-15
CVE-2014-6534 [MEDIUM] CVE-2014-6534: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect integrity via vectors related to WLS Console.
nvd
CVE-2014-4251P4LOWCVSS 3.5v11.1.1.7.0v12.1.2.0.02014-07-17
CVE-2014-4251 [LOW] CVE-2014-4251: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0 and 12.1.2.0 allows remote authenticated users to affect integrity via vectors related to plugin 1.1.
nvd
CVE-2014-6548P4MEDIUMCVSS 4.6v11.1.1.72015-01-21
CVE-2014-6548 [MEDIUM] CVE-2014-6548: Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 all
Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and availability via vectors related to B2B Engine.
nvd
CVE-2011-0794P4MEDIUMCVSS 4.4v8.3.5.02011-04-20
CVE-2011-0794 [MEDIUM] CVE-2011-0794: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5.0 allows local users to affect confidentiality, integrity, and availability, related to File ID SDK. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not commented on claims from a reliable third party that this issue is in (
nvd
CVE-2012-0110P4MEDIUMCVSS 4.4v8.3.5.0v8.3.7.02012-01-18
CVE-2012-0110 [MEDIUM] CVE-2012-0110: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.
nvd
CVE-2011-0884P4MEDIUMCVSS 4.0v11.1.1.3.0v11.1.1.4.0+1 more2011-07-20
CVE-2011-0884 [MEDIUM] CVE-2011-0884: Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Fusion Middleware 1
Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Fusion Middleware 11.1.1.3.0, 11.1.1.4.0, and 11.1.1.5.0 allows remote authenticated users to affect availability, related to BPEL Console.
nvd
CVE-2013-1514P4MEDIUMCVSS 4.0v10.1.3.52013-04-17
CVE-2013-1514 [MEDIUM] CVE-2013-1514: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote authenticated users to affect integrity via vectors related to RMI Support.
nvd
CVE-2015-4914P4LOWCVSS 3.5v10.1.3.5v11.1.1.7+3 more2015-10-22
CVE-2015-4914 [LOW] CVE-2015-4914: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5,
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Listener.
nvd
CVE-2015-4744P4LOWCVSS 2.6v2.1.1v3.0.1+5 more2015-07-16
CVE-2015-4744 [LOW] CVE-2015-4744: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.
nvd
CVE-2011-0808P4MEDIUMCVSS 4.4v8.3.2.0v8.3.5.02011-04-20
CVE-2011-0808 [MEDIUM] CVE-2011-0808: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not commented on claims from a reliab
nvd
CVE-2012-0515P4MEDIUMCVSS 4.0v9.1.0.42012-05-03
CVE-2012-0515 [MEDIUM] CVE-2012-0515: Unspecified vulnerability in the Identity Manager Connector component in Oracle Fusion Middleware 9.
Unspecified vulnerability in the Identity Manager Connector component in Oracle Fusion Middleware 9.1.0.4 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2013-1516P4MEDIUMCVSS 4.0v10.1.3.5.12013-04-17
CVE-2013-1516 [MEDIUM] CVE-2013-1516: Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1
Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server.
nvd
CVE-2011-0883P4MEDIUMCVSS 4.0v10.1.2.3v10.1.3.5+2 more2011-07-20
CVE-2011-0883 [MEDIUM] CVE-2011-0883: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.2.3, 10.1.3.5, 10.1.4.0.1, and 10.1.4.3 allows remote authenticated users to affect integrity, related to Servlet Runtime in OC4J.
nvd
CVE-2010-4425P4LOWCVSS 3.5v10.1.3.3.2v10.1.3.4.0+1 more2011-01-19
CVE-2010-4425 [LOW] CVE-2010-4425: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.3.
Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2, 10.1.3.4.0, and 10.1.3.4.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Server.
nvd
CVE-2015-0451P4LOWCVSS 3.5v3.0-042015-04-16
CVE-2015-0451 [LOW] CVE-2015-0451: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 3.0-04 allows
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 3.0-04 allows remote authenticated users to affect confidentiality via vectors related to OpenSSO Web Agents.
nvd
CVE-2015-2598P4LOWCVSS 3.5≤ 11.1.1.6.392015-07-16
CVE-2015-2598 [LOW] CVE-2015-2598: Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Or
Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 (11.6.39) allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad.
nvd