Vulnerabilities

Filters

Reset all

2 selected

313 records

Sort

Vendor: Oracle Component: Fusion Middleware Clear all filters

TI-2026-27404 CVE-2026-35252 · GHSA-j22w-pghr-4cvx

Improper access control in Oracle Security Service

LOW 30

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API).

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00159 Published 2026-04-21 No fix listed CWE-284

TI-2026-27384 CVE-2026-35232 · GHSA-3cff-g674-f8v5

Improper access control in Oracle Fusion Middleware

LOW 23

Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00152 Published 2026-04-21 No fix listed CWE-284

TI-2024-14002 CVE-2024-21215 · GHSA-xfqq-7659-m6jq

Missing authorization in Oracle WebLogic Server

MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00646 Published 2024-10-15 No fix listed CWE-862

TI-2024-13992 CVE-2024-21205 · GHSA-5579-pjqg-g858

Information disclosure in Oracle Service Bus

LOW 30

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00565 Published 2024-10-15 No fix listed CWE-200

TI-2024-13979 CVE-2024-21192 · GHSA-85c7-pjjf-rphq

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle…

LOW 22

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion Middleware (component: WebLogic Mgmt).

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00246 Published 2024-10-15 No fix listed

TI-2024-13978 CVE-2024-21191 · GHSA-m3rx-w78v-9p56

Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of…

LOW 36

Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware (component: FMW Control Plugin).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0043 Published 2024-10-15 No fix listed

TI-2024-13977 CVE-2024-21190 · GHSA-7x8f-79rh-qg88

Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle…

LOW 39

Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware (component: Cloning).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00475 Published 2024-10-15 No fix listed

TI-2023-08366 CVE-2023-21994 · GHSA-79mr-wphf-jwxg

Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware…

LOW 29

Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component: Android Mobile Authenticator App).

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00407 Published 2023-07-18 Fixed in 11.1.2.3.1

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2020-04467 CVE-2020-5421 · GHSA-rv39-3qh7-9v7w

RFD Protection Bypass via jsessionid

MEDIUM 42

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.11564 Published 2020-09-19 Partial fix · 4.3.29, 5.0.19 +2 CWE-35

TI-2020-08586 CVE-2020-10683 · GHSA-hwj3-m3p6-hj38

dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by…

MEDIUM 52

dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07269 Published 2020-05-01 Partial fix · 2.0.3, 2.1.3 CWE-611

TI-2019-07539 CVE-2019-10219 · GHSA-m8p2-495h-ccmh

Cross-site scripting in hibernate-validator

LOW 31

A vulnerability was found in Hibernate-Validator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02157 Published 2019-11-08 Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79

TI-2019-07411 CVE-2019-10086 · GHSA-6phf-73q6-gh87

Deserialization of untrusted data in Apache Commons Beanutils

MEDIUM 61

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.29082 Published 2019-08-20 Partial fix · 1.9.4 CWE-502

TI-2018-02408 CVE-2018-3109 · GHSA-84q2-jhwj-fm22

Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion…

LOW 33

Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01967 Published 2018-08-02 No fix listed

TI-2018-02407 CVE-2018-3108 · GHSA-2h6m-qr7j-x4hf

Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware…

LOW 32

Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification Service).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01791 Published 2018-08-02 No fix listed

TI-2018-01207 CVE-2018-1304 · GHSA-6rxj-58jh-436r

The URL pattern of "" (the empty string) which exactly maps to the context root was not…

MEDIUM 49

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.1707 Published 2018-02-28 Partial fix · 9.0.5, 8.5.28 +2

TI-2018-01208 CVE-2018-1305 · GHSA-jx6h-3fjx-cgv5

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to…

MEDIUM 44

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.14472 Published 2018-02-23 Partial fix · 9.0.5, 8.5.28 +1

TI-2016-00423 CVE-2016-0470 · GHSA-pgcj-f7wg-rx4c

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion…

LOW 28

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vect…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.014 Published 2016-01-21 No fix listed

TI-2016-00417 CVE-2016-0464 · GHSA-jgh9-pqqf-pv8c

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion…

LOW 24

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01917 Published 2016-01-21 No fix listed

TI-2016-00406 CVE-2016-0453 · GHSA-wpgm-8p34-hw6w

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

LOW 12

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server.

CVSS 2.0LOW 1.8 Adjacent network No auth Interaction — EPSS 0.00858 Published 2016-01-21 No fix listed

TI-2016-00394 CVE-2016-0441 · GHSA-3pcv-gxjm-4r56

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

LOW 34

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.01841 Published 2016-01-21 No fix listed

TI-2016-00392 CVE-2016-0439 · GHSA-jhj2-w4v2-vr8q

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware…

LOW 26

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability t…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01831 Published 2016-01-21 No fix listed

TI-2016-00386 CVE-2016-0433 · GHSA-rrwg-36fq-m273

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware…

LOW 23

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01665 Published 2016-01-21 No fix listed

TI-2016-00385 CVE-2016-0432 · GHSA-mpfh-5qpj-3mwp

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion…

LOW 10

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a d…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00349 Published 2016-01-21 No fix listed

TI-2016-00383 CVE-2016-0430 · GHSA-fpfr-v5j9-xwv5

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware…

LOW 23

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01665 Published 2016-01-21 No fix listed