Oracle Fusion Middleware vulnerabilities
312 known vulnerabilities affecting oracle/fusion_middleware.
Total CVEs
312
CISA KEV
3
actively exploited
Public exploits
30
Exploited in wild
5
Severity breakdown
CRITICAL7HIGH29MEDIUM209LOW67
Vulnerabilities
Page 6 of 16
CVE-2015-4877P4LOWCVSS 1.5PoCv8.5.0v8.5.1+1 more2015-10-21
CVE-2015-4877 [LOW] CVE-2015-4877: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878.
nvd
CVE-2015-0493P4LOWCVSS 1.5PoCv8.4.1v8.5.0+1 more2015-04-16
CVE-2015-0493 [LOW] CVE-2015-0493: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-0474.
nvd
CVE-2026-35232P4MEDIUMCVSS 5.4v12.2.1.4.0v14.1.2.0.02026-04-21
CVE-2026-35232 [MEDIUM] CWE-284 CVE-2026-35232: Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). Supported versio
Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Fusion Middleware. Successful attacks require human interaction from a person other tha
nvd
CVE-2019-10219P4MEDIUMCVSS 6.1v12.2.1.3.0v12.2.1.4.02019-11-08
CVE-2019-10219 [MEDIUM] CWE-79 CVE-2019-10219: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properl
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
nvd
CVE-2012-1741P4MEDIUMCVSS 5.8v10.1.3.52012-07-17
CVE-2012-1741 [MEDIUM] CVE-2012-1741: Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Fusion
Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to User Administration Pages.
nvd
CVE-2015-0474P4LOWCVSS 1.5PoCv8.4.1v8.5.0+1 more2015-04-16
CVE-2015-0474 [LOW] CVE-2015-0474: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-0493.
nvd
CVE-2015-0449P4MEDIUMCVSS 5.0v10.3.6v12.1.1+1 more2015-04-16
CVE-2015-0449 [MEDIUM] CVE-2015-0449: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Console.
nvd
CVE-2013-5879P4MEDIUMCVSS 6.8v8.4v8.4.12014-01-15
CVE-2013-5879 [MEDIUM] CVE-2013-5879: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance.
nvd
CVE-2013-0393P4MEDIUMCVSS 6.8v8.3.7.0v8.42013-01-17
CVE-2013-0393 [MEDIUM] CVE-2013-0393: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0418.
nvd
CVE-2013-3781P4MEDIUMCVSS 6.8v8.3.7.0v8.4+1 more2013-07-17
CVE-2013-3781 [MEDIUM] CVE-2013-3781: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7, 8.4.0, and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-3776.
nvd
CVE-2011-2232P4MEDIUMCVSS 6.0v10.1.3.52011-07-20
CVE-2011-2232 [MEDIUM] CVE-2011-2232: Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.
Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, and 11.2.0.1, and Oracle Fusion Middleware 10.1.3.5, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2010-0872P4MEDIUMCVSS 5.0v10.1.2.3v10.1.4.32010-04-13
CVE-2010-0872 [MEDIUM] CVE-2010-0872: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attackers to affect availability via unknown vectors.
nvd
CVE-2014-4211P4MEDIUMCVSS 5.0v11.1.1.7.0v11.1.1.8.02014-07-17
CVE-2014-4211 [MEDIUM] CVE-2014-4211: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect integrity via unknown vectors related to Portlet Services.
nvd
CVE-2015-1926P4MEDIUMCVSS 5.5v11.1.1.8.0v11.1.1.9.02015-07-16
CVE-2015-1926 [MEDIUM] CVE-2015-1926: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal.
nvd
CVE-2014-4201P4MEDIUMCVSS 5.0v10.3.6v12.1.1+1 more2014-07-17
CVE-2014-4201 [MEDIUM] CVE-2014-4201: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services.
nvd
CVE-2014-4202P4MEDIUMCVSS 5.0v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-4202 [MEDIUM] CVE-2014-4202: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services.
nvd
CVE-2015-4751P4MEDIUMCVSS 5.0v11.1.1.7.0v11.1.2.2.02015-07-16
CVE-2015-4751 [MEDIUM] CVE-2015-4751: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect availability via unknown vectors related to Authentication Engine.
nvd
CVE-2015-0367P4MEDIUMCVSS 5.0v11.1.1.5.0v11.1.1.7.0+2 more2015-01-21
CVE-2015-0367 [MEDIUM] CVE-2015-0367: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine.
nvd
CVE-2011-2320P4MEDIUMCVSS 5.0v9.2.4v10.0.2+3 more2011-10-18
CVE-2011-2320 [MEDIUM] CVE-2011-2320: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.
nvd
CVE-2016-0439P4MEDIUMCVSS 5.0v11.1.1.7.0v11.1.1.92016-01-21
CVE-2016-0439 [MEDIUM] CVE-2016-0439: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1
Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability than CVE-2016-0430.
nvd