{"schema_version":"1","data":[{"id":3678,"advisory_id":"ac9d26f1-5873-477a-96fb-c3c040f0a2d6","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-3152","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:33.957837+00:00","extraction_method":"structured","technologies":["core-kev","fusion-middleware"],"cve_ids":["CVE-2012-3152"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Fusion Middleware Unspecified Vulnerability","summary":"Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2012-3152","products":[{"name":{"value":"Fusion Middleware","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-3152","aliases":["CVE-2012-3152"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-3152","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-3152","dueDate":"2022-05-03","product":"Fusion Middleware","dateAdded":"2021-11-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems.","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-3152","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2682,"advisory_id":"d58dd472-a11c-4571-9c4f-3d7ae8c3cc8f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0518","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:27.618147+00:00","extraction_method":"structured","technologies":["core-kev","fusion-middleware"],"cve_ids":["CVE-2012-0518"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Fusion Middleware Unspecified Vulnerability","summary":"Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2012-0518","products":[{"name":{"value":"Fusion Middleware","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0518","aliases":["CVE-2012-0518"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-601"],"cveID":"CVE-2012-0518","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0518","dueDate":"2022-04-18","product":"Fusion Middleware","dateAdded":"2022-03-28","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0518","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2549,"advisory_id":"de6ae7b1-9a7f-4f13-bada-b4dfba6bcc86","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1710","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:16.825101+00:00","extraction_method":"structured","technologies":["core-kev","fusion-middleware"],"cve_ids":["CVE-2012-1710"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Fusion Middleware Unspecified Vulnerability","summary":"Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2012-1710","products":[{"name":{"value":"Fusion Middleware","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-1710","aliases":["CVE-2012-1710"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-1710","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1710","dueDate":"2022-06-15","product":"Fusion Middleware","dateAdded":"2022-05-25","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2012-1710","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1401,"advisory_id":"c8a949b3-7ae8-4897-a1ea-fb0773f1bf41","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-35587","source_published_at":"2022-11-28T00:00:00+00:00","published_at":"2026-10-24T21:02:05.512843+00:00","extraction_method":"structured","technologies":["core-kev","fusion-middleware"],"cve_ids":["CVE-2021-35587"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Fusion Middleware Unspecified Vulnerability","summary":"Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-35587","products":[{"name":{"value":"Fusion Middleware","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-35587","aliases":["CVE-2021-35587"],"affected":[],"modified":"2022-11-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502","CWE-790"],"cveID":"CVE-2021-35587","notes":"https://www.oracle.com/security-alerts/cpujan2022.html; https://nvd.nist.gov/vuln/detail/CVE-2021-35587","dueDate":"2022-12-19","product":"Fusion Middleware","dateAdded":"2022-11-28","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-35587","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1219,"advisory_id":"39aebfc7-0e2f-4e72-b9b0-14f6555f2afc","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551","source_published_at":"2023-11-16T00:00:00+00:00","published_at":"2026-10-24T20:58:32.015742+00:00","extraction_method":"structured","technologies":["core-kev","fusion-middleware"],"cve_ids":["CVE-2020-2551"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Fusion Middleware Unspecified Vulnerability","summary":"Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2020-2551","products":[{"name":{"value":"Fusion Middleware","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-2551","aliases":["CVE-2020-2551"],"affected":[],"modified":"2023-11-16T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2020-2551","notes":"https://www.oracle.com/security-alerts/cpujan2020.html; https://nvd.nist.gov/vuln/detail/CVE-2020-2551","dueDate":"2023-12-07","product":"Fusion Middleware","dateAdded":"2023-11-16","vendorProject":"Oracle","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-2551","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":294,"advisory_id":"c98fdc61-9bde-4c09-b4a7-0971fdc5f090","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61757","source_published_at":"2025-11-21T00:00:00+00:00","published_at":"2026-10-24T20:43:09.893641+00:00","extraction_method":"structured","technologies":["core-kev","fusion-middleware"],"cve_ids":["CVE-2025-61757"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","summary":"Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2025-61757","products":[{"name":{"value":"Fusion Middleware","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-61757","aliases":["CVE-2025-61757"],"affected":[],"modified":"2025-11-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-306"],"cveID":"CVE-2025-61757","notes":"https://www.oracle.com/security-alerts/cpuoct2025.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-61757","dueDate":"2025-12-12","product":"Fusion Middleware","dateAdded":"2025-11-21","vendorProject":"Oracle","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.","vulnerabilityName":"Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2025-61757","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3678,"next_before":294}