FM
App Server
Fusion Middleware
On CISA KEVExploited in the wildRansomware-linked
315
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 12Low 0
Watch
Add Fusion Middleware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-0518 In wildKEV | 4.7 | Oct 16 | Oracle Fusion Middleware Unspecified Vulnerability Affected: 10.1.4.3 |
| CVE-2012-1695 | 6.8 | May 3 | Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect… Affected: through 28.2.2; 7.5.2; 8.3.2.0; 8.3.5.0; 9.2.4; 10.0.2; +17 more |
| CVE-2024-21205 | 6.5 | Oct 15 | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality) Affected: 12.2.1.4.0 |
| CVE-2023-21994 | 6.5 | Jul 18 | Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component: Android Mobile Authenticator App) Affected: before 11.1.2.3.1 |
| CVE-2020-5421 | 6.5 | Sep 19 | RFD Protection Bypass via jsessionid Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2018-3109 | 6.5 | Aug 2 | Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder) Affected: 12.2.1.2; 12.2.1.3 |
| CVE-2018-3108 | 6.5 | Aug 2 | Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification Service) Affected: 12.2.1.2; 12.2.1.3 |
| CVE-2018-1305 | 6.5 | Feb 23 | Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a… Affected: 12.2.1.3.0 |
| CVE-2026-35252 | 6.4 | Apr 21 | Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API) Affected: 12.1.3.0.0; 12.2.1.4.0 |
| CVE-2018-1304 | 5.9 | Feb 28 | The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49… Affected: 12.2.1.3.0 |
| CVE-2026-35232 | 5.4 | Apr 21 | Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2024-21192 | 4.4 | Oct 15 | Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion Middleware (component: WebLogic Mgmt) Affected: 12.2.1.4.0 |
Showing 12