CVE-2017-5645

CVE-2017-5645 affects Apache Log4j 2.x prior to 2.8.2. The vulnerability arises when using a TCP/UDP socket server to receive serialized log events from another application; a crafted binary payload can be deserialized to execute arbitrary code. The documented impact is remote code execution via ...

CVE-2018-1000613

CVE-2018-1000613 concerns Legion of the Bouncy Castle Java Cryptography APIs (BC) 1.58–1.59 up to, but not including, 1.60. It is a CWE-470 Unsafe Reflection vulnerability in XMSS/XMSS^MT private key deserialization, which can allow a remote attacker to execute arbitrary code by crafting a privat...

CVE-2018-1000180

CVE-2018-1000180 affects Bouncy Castle BC 1.54–1.59 (and BC-FJA 1.0.0/1.0.1) with a flaw in the Low-level RSA key pair generator interface that may produce RSA key pairs with fewer Miller–Rabin primality tests than expected. IBM vulnerability bulletins associate this CVE with IBM products (e.g., ...

CVE-2019-17359

The CVE-2019-17359 entry concerns Bouncy Castle Crypto (BC Java) 1.63. The vulnerability lies in the ASN.1 parser, which can trigger a large memory allocation leading to a memory exhaustion/OutOfMemoryError via crafted ASN.1 data. Affected product: BC Java 1.63; fixed in BC Java 1.64. The issue i...

CVE-2022-21562

CVE-2022-21562 affects Oracle Fusion Middleware’s Oracle SOA Suite (Fabric Layer). Affected are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability enables unauthenticated network access over HTTP to compromise the SOA Suite, potentially allowing unauthorized creation, deletion or modification of data a...

CVE-2022-21622

The CVE-2022-21622 entry affects Oracle Fusion Middleware’s Oracle SOA Suite (Adapters) with affected versions 12.2.1.3.0 and 12.2.1.4.0. The issue enables an unauthenticated attacker, over the network via HTTP, to compromise data in the Oracle SOA Suite, potentially allowing unauthorized creatio...

CVE-2019-2572

CVE-2019-2572 affects Oracle Fusion Middleware Oracle SOA Suite (Fabric Layer) with version 11.1.1.9.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker and can lead to unauthorized read access to a subset of SOA Suite data. Affected component/issue is documented...

CVE-2017-10026

CVE-2017-10026 affects the Oracle Fusion Middleware’s Oracle SOA Suite component (Fabric Layer), specifically the 11.1.1.7.0 version. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the SOA Suite. The description notes that attacks require human int...

CVE-2018-3105

CVE-2018-3105 affects Oracle Fusion Middleware/SOA Suite (Health Care FastPath). Affected products/versions: Oracle SOA Suite in 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3.0. The issue is exploitable by a low-privileged attacker over HTTP with network access, leading to unauthorized...

CVE-2026-60538

The CVE-2026-60538 entry concerns Oracle Fusion Middleware Oracle SOA Suite, specifically the Enterprise Scheduling System component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability permits an unauthenticated, network-based attacker with HTTP access to compromise Oracle SOA Sui...

CVE-2026-60540

CVE-2026-60540 is a vulnerability in Oracle Fusion Middleware’s Oracle SOA Suite (component: Integration Business Insight). Affected are 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle SOA Suite, with potential impact extendi...

CVE-2026-60544

The CVE-2026-60544 entry affects Oracle Fusion Middleware's Oracle SOA Suite (B2B Engine) for affected versions 12.2.1.4.0 and 14.1.2.0.0. It is exploitable over HTTP with network access by an unauthenticated attacker, leading to unauthorized access to critical data and potential partial denial o...

CVE-2026-60539

CVE-2026-60539 affects Oracle Fusion Middleware’s Oracle SOA Suite (component: Integration Business Insight). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability enables a low-privilege, network-accessible attacker (via HTTP) to compromise Oracle SOA Suite, potentially taking over ...

CVE-2026-60548

The CVE concerns Oracle Fusion Middleware’s Oracle SOA Suite (Integration Business Insight) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized access to critical data or full ac...

CVE-2026-60543

CVE-2026-60543 affects Oracle SOA Suite (Fusion Middleware) in the B2B Engine component, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as unauthenticated, network-accessible via HTTP, allowing compromise of the Oracle SOA Suite and potential takeover. The CVSS v...

CVE-2026-60541

CVE-2026-60541 describes a vulnerability in the Oracle SOA Suite (Oracle Fusion Middleware, Enterprise Scheduling System) affecting versions 12.2.1.4.0 and 14.1.2.0.0. The flaw allows an unauthenticated, network-access attacker via HTTP to compromise Oracle SOA Suite, with potential takeover and ...

CVE-2026-60546

CVE-2026-60546 affects Oracle Fusion Middleware’s Oracle SOA Suite (component: Integration Business Insight). Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the Oracle SOA Suite, potentially taking over t...