Oracle Fusion Middleware vulnerabilities
312 known vulnerabilities affecting oracle/fusion_middleware.
Total CVEs
312
CISA KEV
3
actively exploited
Public exploits
30
Exploited in wild
5
Severity breakdown
CRITICAL7HIGH29MEDIUM209LOW67
Vulnerabilities
Page 8 of 16
CVE-2010-3588P4MEDIUMCVSS 5.5v10.1.2.3v11.1.1.2.0+1 more2011-01-19
CVE-2010-3588 [MEDIUM] CVE-2010-3588: Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 10.1.2.3, 1
Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 10.1.2.3, 11.1.1.2.0, and 11.1.1.3.0 allows remote authenticated users to affect confidentiality and integrity, related to EUL Code & Schema.
nvd
CVE-2014-6576P4MEDIUMCVSS 5.5v11.1.1.5.0v11.1.1.7.0+2 more2015-01-21
CVE-2014-6576 [MEDIUM] CVE-2014-6576: Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middlewar
Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to OAM Integration.
nvd
CVE-2015-2658P4MEDIUMCVSS 5.0v11.1.1.7.02015-07-16
CVE-2015-2658 [MEDIUM] CVE-2015-2658: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 allows r
Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to SSL/TLS Support.
nvd
CVE-2014-0450P4MEDIUMCVSS 5.0v11.1.1.7.0v11.1.1.8.02014-04-16
CVE-2014-0450 [MEDIUM] CVE-2014-0450: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection.
nvd
CVE-2012-1736P4MEDIUMCVSS 5.0v10.1.3.12012-07-17
CVE-2012-1736 [MEDIUM] CVE-2012-1736: Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 all
Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.
nvd
CVE-2014-4242P4MEDIUMCVSS 4.3v10.0.2v10.3.6+2 more2014-07-17
CVE-2014-4242 [MEDIUM] CVE-2014-4242: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Console.
nvd
CVE-2016-0464P4MEDIUMCVSS 4.3v10.3.6v12.1.2.0+1 more2016-01-21
CVE-2016-0464 [MEDIUM] CVE-2016-0464: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console.
nvd
CVE-2011-2319P4MEDIUMCVSS 4.3v9.2.4v10.0.2+3 more2011-10-18
CVE-2011-2319 [MEDIUM] CVE-2011-2319: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS.
nvd
CVE-2012-0532P4MEDIUMCVSS 5.5v11.1.1.3.0v11.1.1.5.02012-05-03
CVE-2012-0532 [MEDIUM] CVE-2012-0532: Unspecified vulnerability in the Identity Manager component in Oracle Fusion Middleware 11.1.1.3 and
Unspecified vulnerability in the Identity Manager component in Oracle Fusion Middleware 11.1.1.3 and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Config Management.
nvd
CVE-2013-3831P4MEDIUMCVSS 5.5v11.1.1.6.02013-10-16
CVE-2013-3831 [MEDIUM] CVE-2013-3831: Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6.0 allo
Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Demos.
nvd
CVE-2011-3568P4MEDIUMCVSS 5.5v11.1.1.3.0v11.1.1.4.0+1 more2012-01-18
CVE-2011-3568 [MEDIUM] CVE-2011-3568: Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 1
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security.
nvd
CVE-2013-3828P4MEDIUMCVSS 5.0v10.1.3.5v11.1.1.6.02013-10-16
CVE-2013-3828 [MEDIUM] CVE-2013-3828: Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 10.1.3.5.
Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 10.1.3.5.0 and 11.1.1.6.0 allows remote attackers to affect confidentiality via unknown vectors related to Test Page.
nvd
CVE-2012-1749P4MEDIUMCVSS 5.0v10.1.3.1v11.1.1.5.02012-07-17
CVE-2012-1749 [MEDIUM] CVE-2012-1749: Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 and
Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.
nvd
CVE-2015-0362P4MEDIUMCVSS 5.0v11.1.1.7.02015-01-21
CVE-2015-0362 [MEDIUM] CVE-2015-0362: Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Mi
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to BI Publisher Security.
nvd
CVE-2011-3566P4MEDIUMCVSS 5.0v9.2.4v10.0.2+3 more2012-01-18
CVE-2011-3566 [MEDIUM] CVE-2011-3566: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4,
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container.
nvd
CVE-2014-0414P4MEDIUMCVSS 5.0v10.1.3.52014-04-16
CVE-2014-0414 [MEDIUM] CVE-2014-0414: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via vectors related to HTTP Request Handling.
nvd
CVE-2015-2593P4HIGHCVSS 7.1v11.1.2.22015-07-16
CVE-2015-2593 [HIGH] CVE-2015-2593: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service.
nvd
CVE-2015-2623P4MEDIUMCVSS 4.3v3.0.1v3.1.2+4 more2015-07-16
CVE-2015-2623 [MEDIUM] CVE-2015-2623: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.
nvd
CVE-2013-3764P4MEDIUMCVSS 5.5v7.4.0v7.5.1.12013-07-17
CVE-2013-3764 [MEDIUM] CVE-2013-3764: Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 an
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3763.
nvd
CVE-2013-5816P4MEDIUMCVSS 5.0v2.1.1v3.0.1+1 more2013-10-16
CVE-2013-5816 [MEDIUM] CVE-2013-5816: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote attackers to affect availability via unknown vectors related to Metro.
nvd