Known vulnerabilities in Oracle Fusion Middleware

Vendor: Oracle
Software: Oracle Fusion Middleware
Software CPE: cpe:2.3:a:oracle:oracle_fusion_middleware:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 26
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Fusion Middleware Oracle Fusion Middleware is affected by 26 known vulnerabilities: 5 high, 10 medium, 11 low Critical High Medium Low

Vulnerabilities (26)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126751 - Improper input validation
CVE-2026-35232		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422140
#VU121709 - Improper input validation
CVE-2025-26333		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120100
SB20260120113
SB20260120120
and 7 more
#VU121705 - Improper input validation
CVE-2026-21939		 CWE-20 Low
No
No
 - 20.01.2026 SB2026012079
SB20260422140
#VU114059 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-4949		 CWE-611 High
No
No
 - 14.08.2025 SB2025081408
SB2025081409
SB2025081410
and 21 more
#VU112257 - Improper input validation
CVE-2025-31672		 CWE-20 Medium
No
No
 - 04.07.2025 SB20250704104
SB2025070708
SB2025071664
and 23 more
#VU107411 - Heap-based Buffer Overflow
CVE-2024-56406		 CWE-122 High
Available
No
 - 14.04.2025 SB2025041424
SB2025041425
SB2025041429
and 18 more
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 - 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU78390 - Improper input validation
CVE-2023-21949		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071932
SB2024011669
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU70994 - Memory corruption
CVE-2022-41342		 CWE-119 Low
No
No
 - 10.01.2023 SB2023011066
SB20260120110
SB20260120113
and 2 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Available
No
 - 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU10095 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2584		 CWE-200 Low
No
No
 - 18.01.2018 SB2018011809
#VU10094 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2715		 CWE-200 Low
No
No
 - 18.01.2018 SB2018011809
#VU10093 - Permissions, Privileges, and Access Controls
CVE-2018-2713		 CWE-264 Medium
No
No
 - 18.01.2018 SB2018011809
#VU10092 - Permissions, Privileges, and Access Controls
CVE-2018-2596		 CWE-264 Medium
No
No
 - 18.01.2018 SB2018011809
#VU10091 - Permissions, Privileges, and Access Controls
CVE-2018-2564		 CWE-264 Medium
No
No
 - 18.01.2018 SB2018011809
#VU10090 - Permissions, Privileges, and Access Controls
CVE-2018-2711		 CWE-264 Medium
No
No
 - 18.01.2018 SB2018011809


Showing elements 1 - 20 out of 26