Fusion Middleware vulnerabilities

4 known vulnerabilities in Fusion Middleware from Oracle. 3 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle WebLogic Server: Missing Authorization

  CVE-2024-21215Oct 15, 2024Oracle

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 9.1 Critical severity

  Oracle Fusion Middleware Unspecified Exploited

  CVE-2012-3152Oct 16, 2012OracleEPSS 98.8%

  Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the p

• 4.7 Medium severity

  Oracle Fusion Middleware Unspecified Exploited

  CVE-2012-0518Oct 16, 2012OracleEPSS 4.69%

  Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.

• 9.8 Critical severity

  Oracle Fusion Middleware Unspecified Exploited

  CVE-2012-1710May 3, 2012OracleEPSS 7.83%

  Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability