Oracle Fusion Middleware vulnerabilities
312 known vulnerabilities affecting oracle/fusion_middleware.
Total CVEs
312
CISA KEV
3
actively exploited
Public exploits
30
Exploited in wild
5
Severity breakdown
CRITICAL7HIGH29MEDIUM209LOW67
Vulnerabilities
Page 4 of 16
CVE-2018-3109P3MEDIUMCVSS 6.5v12.2.1.2v12.2.1.32018-08-02
CVE-2018-3109 [MEDIUM] CVE-2018-3109: Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subco
Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks of this vuln
nvd
CVE-2018-3108P3MEDIUMCVSS 6.5v12.2.1.2v12.2.1.32018-08-02
CVE-2018-3108 [MEDIUM] CVE-2018-3108: Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: O
Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification Service). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Fusion Middleware. Successful attacks of this vulne
nvd
CVE-2026-35252P3MEDIUMCVSS 6.4v12.1.3.0.0v12.2.1.4.02026-04-21
CVE-2026-35252 [MEDIUM] CWE-284 CVE-2026-35252: Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracl
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API). Supported versions that are affected are 12.2.1.4.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks require human int
nvd
CVE-2010-3581P4LOWCVSS 3.5PoCv11.1.1.1.0v11.1.1.2.02010-10-14
CVE-2010-3581 [LOW] CVE-2010-3581: Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 1
Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2014-4255P3MEDIUMCVSS 6.8v10.3.6v12.1.1+1 more2014-07-17
CVE-2014-4255 [MEDIUM] CVE-2014-4255: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Security and Policy.
nvd
CVE-2014-4254P3MEDIUMCVSS 6.8v10.3.6v12.1.1+1 more2014-07-17
CVE-2014-4254 [MEDIUM] CVE-2014-4254: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services.
nvd
CVE-2014-2481P3MEDIUMCVSS 6.8v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-2481 [MEDIUM] CVE-2014-2481: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2480.
nvd
CVE-2014-2480P3MEDIUMCVSS 6.8v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-2480 [MEDIUM] CVE-2014-2480: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481.
nvd
CVE-2011-2255P3MEDIUMCVSS 6.8v9.2.3v10.0.1+2 more2011-10-18
CVE-2011-2255 [MEDIUM] CVE-2011-2255: Unspecified vulnerability in the Oracle WebLogic Portal component in Oracle Fusion Middleware 9.2.3.
Unspecified vulnerability in the Oracle WebLogic Portal component in Oracle Fusion Middleware 9.2.3.0, 10.0.1.0, 10.2.1.0, and 10.3.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2015-0443P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-0443 [MEDIUM] CVE-2015-0443: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015
nvd
CVE-2015-4759P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-4759 [MEDIUM] CVE-2015-4759: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015
nvd
CVE-2015-2634P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-2634 [MEDIUM] CVE-2015-2634: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2635, CVE-2015
nvd
CVE-2015-2635P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-2635 [MEDIUM] CVE-2015-2635: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015
nvd
CVE-2015-0446P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-0446 [MEDIUM] CVE-2015-0446: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-2634, CVE-2015-2635, CVE-2015
nvd
CVE-2015-4758P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-4758 [MEDIUM] CVE-2015-4758: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015
nvd
CVE-2015-0445P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-0445 [MEDIUM] CVE-2015-0445: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015
nvd
CVE-2015-0444P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-0444 [MEDIUM] CVE-2015-0444: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015
nvd
CVE-2014-6499P4MEDIUMCVSS 6.8v10.0.2v10.3.6+3 more2014-10-15
CVE-2014-6499 [MEDIUM] CVE-2014-6499: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to WebLogic Tuxedo Connector.
nvd
CVE-2014-4256P4MEDIUMCVSS 5.8v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-4256 [MEDIUM] CVE-2014-4256: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to WLS - Deployment.
nvd
CVE-2015-4747P4MEDIUMCVSS 6.8v11.1.1.7.0v12.1.3.0.02015-07-16
CVE-2015-4747 [MEDIUM] CVE-2015-4747: Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CEP system.
nvd