FM
App Server
Fusion Middleware
On CISA KEVExploited in the wildRansomware-linked
315
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 12Low 0
Watch
Add Fusion Middleware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-6569 | – | Jan 21 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-6548 | – | Jan 21 | Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and availability via… Affected: 11.1.1.7 |
| CVE-2014-6526 | – | Jan 21 | Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown… Affected: 7.0 |
| CVE-2014-0191 | – | Jan 21 | The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and… Affected: 11.1.1.7.0; 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2014-6554 | – | Oct 15 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality and… Affected: 11.1.2.1.0; 11.1.2.2.0 |
| CVE-2014-6553 | – | Oct 15 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote attackers to affect confidentiality and integrity… Affected: 11.1.1.5.0; 11.1.1.7.0 |
| CVE-2014-6552 | – | Oct 15 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity… Affected: 11.1.1.5.0; 11.1.1.7.0; 11.1.2.1.0; 11.1.2.2.0 |
| CVE-2014-6534 | – | Oct 15 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote authenticated… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2014-6522 | – | Oct 15 | Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via… Affected: 11.1.1.7.0; 11.1.2.4.0; 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2014-6499 | – | Oct 15 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2014-6487 | – | Oct 15 | Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to… Affected: 11.1.1.5.0; 11.1.1.7.0; 11.1.2.1.0; 11.1.2.2.0 |
| CVE-2014-6462 | – | Oct 15 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors… Affected: 11.1.2.1.0; 11.1.2.2.0 |
| CVE-2014-4267 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-4257 | – | Jul 17 | Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via… Affected: 11.1.1.7.0; 11.1.1.8.0 |
| CVE-2014-4256 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-4255 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality,… Affected: 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-4254 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality,… Affected: 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-4253 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-4251 | – | Jul 17 | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0 and 12.1.2.0 allows remote authenticated users to affect integrity via vectors… Affected: 11.1.1.7.0; 12.1.2.0.0 |
| CVE-2014-4249 | – | Jul 17 | Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to… Affected: 11.1.1.7.0 |
| CVE-2014-4242 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-4241 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related… Affected: 10.0.2; 10.3.6 |
| CVE-2014-4222 | – | Jul 17 | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0 and 12.1.2.0 allows remote authenticated users to affect confidentiality via… Affected: 11.1.1.7.0; 12.1.2.0.0 |
| CVE-2014-4217 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, and 12.1.1.0 allows remote attackers to affect integrity via… Affected: 10.0.2; 10.3.6; 12.1.1 |
| CVE-2014-4212 | – | Jul 17 | Unspecified vulnerability in the Oracle Fusion Middleware component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors… Affected: 11.1.1.7.0 |
| CVE-2014-4211 | – | Jul 17 | Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect integrity via unknown… Affected: 11.1.1.7.0; 11.1.1.8.0 |
| CVE-2014-4210 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors… Affected: 10.0.2; 10.3.6 |
| CVE-2014-4202 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-4201 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via… Affected: 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-2493 | – | Jul 17 | Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0 allows remote attackers to affect confidentiality… Affected: 11.1.1.7.0; 11.1.2.4.0; 12.1.2.0.0 |
| CVE-2014-2481 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-2480 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-2479 | – | Jul 17 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-2470 | – | Apr 16 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect… Affected: 10.0.2; 10.3.6; 12.1.1; 12.1.2.0.0 |
| CVE-2014-2452 | – | Apr 16 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to affect availability via unknown vectors… Affected: 11.1.1.5.0 |
| CVE-2014-2426 | – | Apr 16 | Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity and availability… Affected: 8.0 |
| CVE-2014-2425 | – | Apr 16 | Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown… Affected: 8.0 |
| CVE-2014-2424 | – | Apr 16 | Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related… Affected: 11.1.1.7.0 |
| CVE-2014-2418 | – | Apr 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2014-2417 | – | Apr 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2014-2416 | – | Apr 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2014-2415 | – | Apr 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2014-2407 | – | Apr 16 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and… Affected: 11.1.1.3.0 |
| CVE-2014-2404 | – | Apr 16 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0… Affected: 10.1.4.3; 11.1.1.3.0; 11.1.1.5.0; 11.1.1.7.0; 11.1.2.0; 11.1.2.1.0; +1 more |
| CVE-2014-2400 | – | Apr 16 | Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle… Affected: 2.2.2 |
| CVE-2014-2399 | – | Apr 16 | Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle… Affected: 2.2.2 |
| CVE-2014-0465 | – | Apr 16 | Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via unknown… Affected: 8.0 |
| CVE-2014-0450 | – | Apr 16 | Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown… Affected: 11.1.1.7.0; 11.1.1.8.0 |
| CVE-2014-0426 | – | Apr 16 | Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP… Affected: 10.1.3.5 |
| CVE-2014-0414 | – | Apr 16 | Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via vectors related to… Affected: 10.1.3.5 |