Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Fusion Middleware Unspecified Vulnerability

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems. CISA required action: Apply updates per vendor instructions.

Fusion Middleware CVE-2012-3152

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-3152

Fusion Middleware

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-3152
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3678 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:33 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Fusion Middleware Unspecified Vulnerability

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors CISA required action: Apply updates per vendor instructions.

Fusion Middleware CVE-2012-0518

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-0518

Fusion Middleware

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-0518
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2682 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:27 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Fusion Middleware Unspecified Vulnerability

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer. CISA required action: Apply updates per vendor instructions.

Fusion Middleware CVE-2012-1710

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-1710

Fusion Middleware

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-1710
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2549 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:16 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Fusion Middleware Unspecified Vulnerability

Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product. CISA required action: Apply updates per vendor instructions.

Fusion Middleware CVE-2021-35587

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-35587

Fusion Middleware

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-35587
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1401 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:05 GMT
Publisher date: Mon, 28 Nov 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Fusion Middleware Unspecified Vulnerability

Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Fusion Middleware CVE-2020-2551

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-2551

Fusion Middleware

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-2551
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1219 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:58:32 GMT
Publisher date: Thu, 16 Nov 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Fusion Middleware CVE-2025-61757

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2025-61757

Fusion Middleware

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2025-61757
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #294 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:43:09 GMT
Publisher date: Fri, 21 Nov 2025 00:00:00 GMT

Read the original announcement