Oracle Fusion Middleware vulnerabilities
312 known vulnerabilities affecting oracle/fusion_middleware.
Total CVEs
312
CISA KEV
3
actively exploited
Public exploits
30
Exploited in wild
5
Severity breakdown
CRITICAL7HIGH29MEDIUM209LOW67
Vulnerabilities
Page 4 of 16
CVE-2026-35252P3MEDIUMCVSS 6.4v12.1.3.0.0v12.2.1.4.02026-04-21
CVE-2026-35252 [MEDIUM] CWE-284 CVE-2026-35252: Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracl
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API). Supported versions that are affected are 12.2.1.4.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks require human int
nvd
CVE-2010-3581P4LOWCVSS 3.5PoCv11.1.1.1.0v11.1.1.2.02010-10-14
CVE-2010-3581 [LOW] CVE-2010-3581: Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 1
Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2014-2479P3MEDIUMCVSS 6.8v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-2479 [MEDIUM] CVE-2014-2479: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services.
nvd
CVE-2013-0418P3MEDIUMCVSS 6.8v8.3.7.0v8.42013-01-17
CVE-2013-0418 [MEDIUM] CVE-2013-0418: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not comment
nvd
CVE-2014-4255P3MEDIUMCVSS 6.8v10.3.6v12.1.1+1 more2014-07-17
CVE-2014-4255 [MEDIUM] CVE-2014-4255: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Security and Policy.
nvd
CVE-2014-4254P3MEDIUMCVSS 6.8v10.3.6v12.1.1+1 more2014-07-17
CVE-2014-4254 [MEDIUM] CVE-2014-4254: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services.
nvd
CVE-2014-2481P3MEDIUMCVSS 6.8v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-2481 [MEDIUM] CVE-2014-2481: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2480.
nvd
CVE-2014-2480P3MEDIUMCVSS 6.8v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-2480 [MEDIUM] CVE-2014-2480: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481.
nvd
CVE-2011-2255P3MEDIUMCVSS 6.8v9.2.3v10.0.1+2 more2011-10-18
CVE-2011-2255 [MEDIUM] CVE-2011-2255: Unspecified vulnerability in the Oracle WebLogic Portal component in Oracle Fusion Middleware 9.2.3.
Unspecified vulnerability in the Oracle WebLogic Portal component in Oracle Fusion Middleware 9.2.3.0, 10.0.1.0, 10.2.1.0, and 10.3.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2015-0443P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-0443 [MEDIUM] CVE-2015-0443: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015
nvd
CVE-2015-4759P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-4759 [MEDIUM] CVE-2015-4759: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015
nvd
CVE-2015-2634P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-2634 [MEDIUM] CVE-2015-2634: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2635, CVE-2015
nvd
CVE-2015-2635P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-2635 [MEDIUM] CVE-2015-2635: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015
nvd
CVE-2015-0446P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-0446 [MEDIUM] CVE-2015-0446: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-2634, CVE-2015-2635, CVE-2015
nvd
CVE-2015-4758P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-4758 [MEDIUM] CVE-2015-4758: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015
nvd
CVE-2015-0445P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-0445 [MEDIUM] CVE-2015-0445: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015
nvd
CVE-2015-0444P4MEDIUMCVSS 6.8v11.1.1.3.02015-07-16
CVE-2015-0444 [MEDIUM] CVE-2015-0444: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015
nvd
CVE-2014-6499P4MEDIUMCVSS 6.8v10.0.2v10.3.6+3 more2014-10-15
CVE-2014-6499 [MEDIUM] CVE-2014-6499: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to WebLogic Tuxedo Connector.
nvd
CVE-2014-4256P4MEDIUMCVSS 5.8v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-4256 [MEDIUM] CVE-2014-4256: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to WLS - Deployment.
nvd
CVE-2015-4747P4MEDIUMCVSS 6.8v11.1.1.7.0v12.1.3.0.02015-07-16
CVE-2015-4747 [MEDIUM] CVE-2015-4747: Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CEP system.
nvd