Fusion Middleware Security Vulnerabilities and Issues — Fusion Middleware CVE List

Lucene search

OracleFusion Middleware

36 matches found

CVE•added 2011/01/19 4:0 p.m.•130 views

CVE-2010-3598

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Import Export Utility.

7.1CVSS5.9AI score0.01267EPSS

CVE•added 2011/01/19 4:0 p.m.•111 views

CVE-2010-3591

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information was obtained from th...

9.3CVSS5.7AI score0.12378EPSS

CVE•added 2011/01/19 4:0 p.m.•98 views

CVE-2010-3599

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Orac...

9.4CVSS6.6AI score0.41054EPSS

CVE•added 2011/01/19 4:0 p.m.•89 views

CVE-2010-3592

8.5CVSS5.9AI score0.02957EPSS

CVE•added 2011/01/19 4:0 p.m.•89 views

CVE-2010-3595

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not ...

7.8CVSS5.5AI score0.28808EPSS

CVE•added 2011/04/20 3:14 a.m.•84 views

CVE-2011-0785

Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity via unknown vectors.

4.3CVSS6AI score0.00229EPSS

CVE•added 2011/07/20 10:55 p.m.•81 views

CVE-2011-2232

Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, and 11.2.0.1, and Oracle Fusion Middleware 10.1.3.5, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

6CVSS5.7AI score0.00265EPSS

CVE•added 2011/07/20 10:55 p.m.•75 views

CVE-2011-2231

Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1, Oracle Fusion Middleware 10.1.3.5, allows remote attackers to affect availability via unknown vectors.

4.3CVSS6.2AI score0.00499EPSS

CVE•added 2011/01/19 5:0 p.m.•54 views

CVE-2010-4437

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.

5.8CVSS5.6AI score0.48894EPSS

CVE•added 2011/04/20 3:14 a.m.•54 views

CVE-2011-0808

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the A...

4.4CVSS5.2AI score0.0015EPSS

CVE•added 2011/07/21 12:55 a.m.•50 views

CVE-2011-2264

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obt...

4.4CVSS6AI score0.04465EPSS

CVE•added 2011/10/18 10:55 p.m.•49 views

CVE-2011-2237

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-3523.

3.5CVSS8.1AI score0.00177EPSS

CVE•added 2011/01/19 5:0 p.m.•48 views

CVE-2010-4453

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.

4.3CVSS5.9AI score0.00483EPSS

CVE•added 2011/01/19 4:0 p.m.•47 views

CVE-2010-4425

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2, 10.1.3.4.0, and 10.1.3.4.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Server.

3.5CVSS5.4AI score0.00406EPSS

CVE•added 2011/04/20 3:14 a.m.•46 views

CVE-2011-0795

Unspecified vulnerability in the Single Sign On component in Oracle Fusion Middleware 10.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Administration and Monitoring.

3.5CVSS7.6AI score0.0015EPSS

CVE•added 2011/04/20 3:14 a.m.•44 views

CVE-2011-0789

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.

4.3CVSS8.4AI score0.00311EPSS

CVE•added 2011/07/20 10:55 p.m.•43 views

CVE-2011-0884

Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Fusion Middleware 11.1.1.3.0, 11.1.1.4.0, and 11.1.1.5.0 allows remote authenticated users to affect availability, related to BPEL Console.

4CVSS8AI score0.00251EPSS

CVE•added 2011/10/18 10:55 p.m.•43 views

CVE-2011-3523

3.5CVSS8.1AI score0.00177EPSS

CVE•added 2011/01/19 4:0 p.m.•42 views

CVE-2010-4416

Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims f...

5CVSS6.3AI score0.02079EPSS

CVE•added 2011/10/18 10:55 p.m.•42 views

CVE-2011-2319

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS.

4.3CVSS6.2AI score0.00536EPSS

CVE•added 2011/10/18 10:55 p.m.•42 views

CVE-2011-3510

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security.

4.9CVSS5.2AI score0.00291EPSS

CVE•added 2011/07/20 11:55 p.m.•41 views

CVE-2011-2241

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.1 and 11.1.1.3 allows remote attackers to affect availability via unknown vectors related to Analytics Server.

5CVSS6AI score0.00677EPSS

CVE•added 2011/01/19 5:0 p.m.•40 views

CVE-2010-4455

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.2 and 11.1.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Apache Plugin.

6.4CVSS5.7AI score0.0061EPSS

CVE•added 2011/07/21 12:55 a.m.•40 views

CVE-2011-2267

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.

1.9CVSS5.9AI score0.00573EPSS

CVE•added 2011/01/19 4:0 p.m.•39 views

CVE-2010-4427

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.0, 10.1.3.4.1, and 11.1.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Server.

3.5CVSS5.4AI score0.00349EPSS

CVE•added 2011/04/20 3:14 a.m.•39 views

CVE-2011-0794

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5.0 allows local users to affect confidentiality, integrity, and availability, related to File ID SDK. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not commente...

4.4CVSS5.5AI score0.0015EPSS

CVE•added 2011/07/20 10:55 p.m.•39 views

CVE-2011-0883

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.2.3, 10.1.3.5, 10.1.4.0.1, and 10.1.4.3 allows remote authenticated users to affect integrity, related to Servlet Runtime in OC4J.

4CVSS5.8AI score0.00181EPSS

CVE•added 2011/10/18 10:55 p.m.•39 views

CVE-2011-2314

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors related to JavaServer Pages.

4.3CVSS8.1AI score0.00499EPSS

CVE•added 2011/10/18 10:55 p.m.•38 views

CVE-2011-2255

Unspecified vulnerability in the Oracle WebLogic Portal component in Oracle Fusion Middleware 9.2.3.0, 10.0.1.0, 10.2.1.0, and 10.3.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

6.8CVSS6.2AI score0.00902EPSS

CVE•added 2011/04/20 3:14 a.m.•37 views

CVE-2011-0798

Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 11.1.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Midtier Infrastructure.

4.3CVSS6AI score0.00311EPSS

CVE•added 2011/01/19 4:0 p.m.•35 views

CVE-2010-3510

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.3, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Node Manager.

10CVSS6AI score0.04289EPSS

CVE•added 2011/01/19 4:0 p.m.•35 views

CVE-2010-3597

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.0 allows local users to affect availability, related to Outside In Viewer SDK.

1.9CVSS5.8AI score0.00084EPSS

CVE•added 2011/01/19 4:0 p.m.•34 views

CVE-2010-3588

Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 10.1.2.3, 11.1.1.2.0, and 11.1.1.3.0 allows remote authenticated users to affect confidentiality and integrity, related to EUL Code & Schema.

5.5CVSS5.7AI score0.00379EPSS

CVE•added 2011/10/18 10:55 p.m.•34 views

CVE-2011-2318

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security.

1.5CVSS5.9AI score0.00098EPSS

CVE•added 2011/10/18 10:55 p.m.•33 views

CVE-2011-2320

5CVSS5.8AI score0.00536EPSS

CVE•added 2011/10/18 10:55 p.m.•33 views

CVE-2011-3541

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows local users to affect availability via unknown vectors related to Outside In Filters.

1.9CVSS5.5AI score0.00466EPSS