Oracle Fusion Middleware vulnerabilities

• oracle fusion middleware, oracle corporation security service +1 more Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C... CVE-2026-35252 6.4 MediumApril 21, 2026
• oracle fusion middleware Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). Supported... CVE-2026-35232 5.4 MediumApril 21, 2026
• oracle fusion middleware, oracle corporation weblogic server +1 more Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... CVE-2024-21215 7.5 HighOctober 15, 2024
• oracle fusion middleware, oracle corporation service bus +1 more Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core... CVE-2024-21205 6.5 MediumOctober 15, 2024
• oracle fusion middleware, oracle corporation enterprise manager for fusion middleware +1 more Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion... CVE-2024-21192 4.4 MediumOctober 15, 2024
• oracle fusion middleware, oracle corporation enterprise manager fusion middleware control +1 more Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion... CVE-2024-21191 7.6 HighOctober 15, 2024
• oracle fusion middleware, oracle corporation global lifecycle management fmw installer +1 more Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion... CVE-2024-21190 7.5 HighOctober 15, 2024
• oracle fusion middleware, oracle corporation mobile security suite +1 more Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component:... CVE-2023-21994 6.5 MediumJuly 18, 2023
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• apache mina, oracle banking payments, banking trade finance process management +6 more +8 more Apache MINA HTTP listener DOS CVE-2021-41973 Fix available 6.5 MediumNovember 1, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• apache batik, debian linux, fedoraproject fedora +19 more +21 more Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 more RFD Protection Bypass via jsessionid CVE-2020-5421 Public exploitFix available EPSS 11.6% 8.7 HighSeptember 19, 2020
• oracle fusion middleware mapviewer Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware ... CVE-2020-14608 8.2 HighJuly 15, 2020
• oracle fusion middleware mapviewer Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware ... CVE-2020-14607 6.1 MediumJuly 15, 2020
• apache batik, oracle api gateway, business intelligence +15 more +17 more Server-side request forgery (SSRF) in Apache Batik CVE-2019-17566 Fix available EPSS 10.9% 7.5 HighJune 22, 2020
• dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 more dom4j allows External Entities by default which might enable XXE attacks CVE-2020-10683 Fix available 9.8 CriticalApril 29, 2020
• oracle enterprise manager for fusion middleware, oracle corporation apm - application performance management +1 more Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise... CVE-2020-2614 6.0 MediumJanuary 15, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• softwareag quartz, apache tomee, atlassian jira service management +28 more +30 more XML external entity injection in Terracotta Quartz Scheduler CVE-2019-13990 Public exploitFix available EPSS 16.6% 9.8 CriticalJuly 26, 2019
• apache axis 1.4, axis, oracle agile engineering data management +35 more +37 more Server Side Request Forgery in Apache Axis CVE-2019-0227 Public exploitFix available EPSS 91.9% 7.5 HighMay 1, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• apache axis, debian linux, oracle agile engineering data management +35 more +37 more Moderate severity vulnerability that affects apache axis CVE-2018-8032 Public exploitFix available EPSS 10.6% 6.1 MediumAugust 2, 2018
• oracle fusion middleware, oracle corporation fusion middleware mapviewer +1 more Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware ... CVE-2018-3109 6.5 MediumAugust 2, 2018
• oracle fusion middleware Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent... CVE-2018-3108 6.5 MediumAugust 2, 2018
• oracle fusion middleware mapviewer Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware ... CVE-2018-2943 9.8 CriticalJuly 18, 2018
• bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 more Deserialization of Untrusted Data in Bouncy castle CVE-2018-1000613 Fix available 9.8 CriticalJuly 9, 2018
• apache batik, canonical ubuntu linux, debian linux +18 more +20 more Deserialization of Untrusted Data in Apache Batik CVE-2018-8013 Fix available EPSS 18.6% 9.8 CriticalMay 23, 2018
• apache tomcat, canonical ubuntu linux, debian linux +7 more +9 more Apache Tomcat unauthorized access vulnerability CVE-2018-1304 Public exploitFix available EPSS 17.1% 5.9 MediumFebruary 28, 2018
• apache tomcat, canonical ubuntu linux, debian linux +3 more +5 more Apache Tomcat information exposure vulnerability CVE-2018-1305 Public exploitFix available EPSS 14.5% 6.5 MediumFebruary 23, 2018
• jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 more Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018
• oracle fusion middleware mapviewer Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware ... CVE-2017-3230 8.6 HighApril 24, 2017
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• oracle enterprise manager for fusion middleware Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle... CVE-2016-3496 4.7 MediumJuly 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1... CVE-2016-0470 5.5 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10... CVE-2016-0464 4.3 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3... CVE-2016-0453 1.8 LowJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3... CVE-2016-0441 6.8 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and... CVE-2016-0439 5.0 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.9.0... CVE-2016-0433 4.3 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion... CVE-2016-0432 1.9 LowJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and... CVE-2016-0430 4.3 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1... CVE-2016-0429 4.3 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware... CVE-2016-0413 4.0 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware... CVE-2016-0404 4.3 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1... CVE-2016-0401 4.3 MediumJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion... CVE-2015-4808 1.9 LowJanuary 21, 2016
• oracle fusion middleware Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3... CVE-2015-4914 3.5 LowOctober 21, 2015
• Show olderLoading…