FM
App Server
Fusion Middleware
On CISA KEVExploited in the wildRansomware-linked
315
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 12Low 0
Watch
Add Fusion Middleware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4799 | – | Oct 21 | Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.1, and 11.1.1.8.0 allows remote attackers to affect integrity via… Affected: 7.6.2; 11.1.1.6.1; 11.1.1.8.0 |
| CVE-2015-1829 | – | Oct 21 | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect… Affected: 10.1.3.5; 11.1.1.7; 11.1.1.9; 12.1.2.0; 12.1.3.0 |
| CVE-2015-4759 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-4758 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-4751 | – | Jul 16 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect availability via unknown… Affected: 11.1.1.7.0; 11.1.2.2.0 |
| CVE-2015-4747 | – | Jul 16 | Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote attackers to affect confidentiality, integrity,… Affected: 11.1.1.7.0; 12.1.3.0.0 |
| CVE-2015-4745 | – | Jul 16 | Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect… Affected: 2.2.2; 2.3; 2.4; 3.0; 3.1 |
| CVE-2015-4744 | – | Jul 16 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion… Affected: 2.1.1; 3.0.1; 3.1.2; 10.3.6; 12.1.1; 12.1.2.0.0; +1 more |
| CVE-2015-4742 | – | Jul 16 | Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect… Affected: 11.1.1.7.0; 11.1.2.4.0; 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2015-2658 | – | Jul 16 | Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to SSL/TLS… Affected: 11.1.1.7.0 |
| CVE-2015-2636 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-2635 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-2634 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-2623 | – | Jul 16 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion… Affected: 3.0.1; 3.1.2; 10.3.6; 12.1.1; 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2015-2606 | – | Jul 16 | Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect… Affected: 2.2.2; 2.3; 2.4; 3.0; 3.1 |
| CVE-2015-2605 | – | Jul 16 | Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect… Affected: 2.2.2; 2.3; 2.4; 3.0; 3.1 |
| CVE-2015-2604 | – | Jul 16 | Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect… Affected: 2.2.2; 2.3; 2.4; 3.0; 3.1 |
| CVE-2015-2603 | – | Jul 16 | Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect… Affected: 2.2.2; 2.3; 2.4; 3.0; 3.1 |
| CVE-2015-2602 | – | Jul 16 | Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect… Affected: 2.2.2; 2.3; 2.4; 3.0; 3.1 |
| CVE-2015-2598 | – | Jul 16 | Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 (11.6.39) allows remote authenticated… Affected: through 11.1.1.6.39 |
| CVE-2015-2593 | – | Jul 16 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via… Affected: 11.1.2.2 |
| CVE-2015-1926 | – | Jul 16 | Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle… Affected: 11.1.1.8.0; 11.1.1.9.0 |
| CVE-2015-0446 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-0445 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-0444 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-0443 | – | Jul 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2015-0493 | – | Apr 16 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown… Affected: 8.4.1; 8.5.0; 8.5.1 |
| CVE-2015-0482 | – | Apr 16 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.2.0 and 12.1.3.0 allows remote authenticated users to affect confidentiality,… Affected: 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2015-0474 | – | Apr 16 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown… Affected: 8.4.1; 8.5.0; 8.5.1 |
| CVE-2015-0461 | – | Apr 16 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and… Affected: 11.1.1.5; 11.1.1.7 |
| CVE-2015-0456 | – | Apr 16 | Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related… Affected: 11.1.1.8.0 |
| CVE-2015-0451 | – | Apr 16 | Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 3.0-04 allows remote authenticated users to affect confidentiality via vectors related to… Affected: 3.0-04 |
| CVE-2015-0450 | – | Apr 16 | Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related… Affected: 11.1.1.8.0 |
| CVE-2015-0449 | – | Apr 16 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via… Affected: 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2015-0434 | – | Jan 21 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect… Affected: 11.1.1.5; 11.1.1.7; 11.1.2.1; 11.1.2.2 |
| CVE-2015-0420 | – | Jan 21 | Unspecified vulnerability in the Oracle Forms component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect confidentiality via unknown vectors… Affected: 11.1.1.7.0; 11.1.2.2.0 |
| CVE-2015-0414 | – | Jan 21 | Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote authenticated users to affect confidentiality via… Affected: 11.1.1.7.0; 12.1.3.0.0 |
| CVE-2015-0401 | – | Jan 21 | Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated users to affect… Affected: 7.0; 11.1.1.7.0 |
| CVE-2015-0399 | – | Jan 21 | Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to… Affected: 10.1.3.4.2; 11.1.1.7.0 |
| CVE-2015-0396 | – | Jan 21 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and… Affected: 3.0.1; 3.1.2 |
| CVE-2015-0389 | – | Jan 21 | Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via vectors… Affected: 8.0 |
| CVE-2015-0386 | – | Jan 21 | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via… Affected: 11.1.1.7.0; 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2015-0376 | – | Jan 21 | Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related… Affected: 11.1.1.8.0 |
| CVE-2015-0372 | – | Jan 21 | Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors Affected: 10.1.3.5 |
| CVE-2015-0367 | – | Jan 21 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity… Affected: 11.1.1.5.0; 11.1.1.7.0; 11.1.2.1.0; 11.1.2.2.0 |
| CVE-2015-0362 | – | Jan 21 | Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown… Affected: 11.1.1.7.0 |
| CVE-2014-6592 | – | Jan 21 | Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via vectors… Affected: 8.0 |
| CVE-2014-6580 | – | Jan 21 | Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect integrity via unknown… Affected: 11.1.1.7.0; 11.1.2.2.0 |
| CVE-2014-6576 | – | Jan 21 | Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users… Affected: 11.1.1.5.0; 11.1.1.7.0; 11.1.2.1.0; 11.1.2.2.0 |
| CVE-2014-6571 | – | Jan 21 | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality,… Affected: 11.1.1.7.0; 12.1.2.0.0; 12.1.3.0.0 |