WaratekVRT Sign in
Reset
More filters (1)
Columns
Product fusion middleware✕
Overview 23 matches · 0 protected · 2 exploited · 2 CISA KEV · 21 public PoC · 2 EPSS ≥ 0.5
23matches 0protected0.0% 2exploited8.7% 2CISA KEV8.7% 21public PoC91.3% 2EPSS ≥ 0.58.7%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 23 100.0% No exploit published 0 0.0%
Critical 1 4.3% High 1 4.3% Medium 13 56.5% Low 8 34.8% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 21 91.3% not established 2 8.7% unrecorded 0 0.0%
Exploited 2 8.7% Working exploit published 21 91.3% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 5 / quarter
Mitigation candidate: 23 Low: 8Medium: 13High: 1Critical: 1 not established: 2not blocked: 21 Working exploit published: 21Exploited: 2
Q3 101 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 Q4 101 Mitigation candidate1 Low1 not blocked1 Working exploit published1 Q1 112 Mitigation candidate2 High1 Medium1 not blocked2 Working exploit published2 Q2 110 Q3 110 Q4 110 Q1 120 Q2 121 Mitigation candidate1 Critical1 not established1 Exploited1 Q3 123 Mitigation candidate3 Low3 not blocked3 Working exploit published3 Q4 125 Mitigation candidate5 Medium5 not blocked4 not established1 Exploited1 Working exploit published4 Q1 130 Q2 132 Mitigation candidate2 Medium2 not blocked2 Working exploit published2 Q3 131 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 Q4 130 Q1 140 Q2 142 Mitigation candidate2 Medium2 not blocked2 Working exploit published2 Q3 141 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 Q4 140 Q1 150 Q2 152 Mitigation candidate2 Low2 not blocked2 Working exploit published2 Q3 150 Q4 152 Mitigation candidate2 Low2 not blocked2 Working exploit published2
Q4 10Q2 11Q4 11Q2 12Q4 12Q2 13Q4 13Q2 14Q4 14Q2 15Q4 15
23 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2015-4878 Low 2015-10-21 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4877.
CVE-2015-4877 Low 2015-10-21 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878.
CVE-2015-0493 Low 2015-04-16 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-0474.
CVE-2015-0474 Low 2015-04-16 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-0493.
CVE-2014-4210 Medium 2014-07-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services.
CVE-2014-2424 Medium 2014-04-16 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.
CVE-2014-2399 Medium 2014-04-16 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2400.
CVE-2013-3763 Medium 2013-07-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764.
CVE-2013-1559 Medium 2013-04-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server.
CVE-2013-1509 Medium 2013-04-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites.
CVE-2012-3186 Medium 2012-10-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3183 and CVE-2012-3185.
CVE-2012-3185 Medium 2012-10-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3183 and CVE-2012-3186.
CVE-2012-3184 Medium 2012-10-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Advanced UI.
CVE-2012-3183 Medium 2012-10-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3185 and CVE-2012-3186.
CVE-2012-0518 Medium 2012-10-16 Mitigation candidate Exploited Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.
CVE-2012-1770 Low 2012-07-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
CVE-2012-1769 Low 2012-07-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
CVE-2012-1744 Low 2012-07-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent users to affect availability via unknown vectors related to Outside In Filters.
CVE-2012-1710 Critical 2012-05-03 Mitigation candidate Exploited Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.
CVE-2010-4437 Medium 2011-01-19 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.
CVE-2010-3595 High 2011-01-19 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can read arbitrary files via a full pathname in the first argument to the ImportBodyText method in the EasyMail ActiveX control (emsmtp.dll).
CVE-2010-3581 Low 2010-10-14 Mitigation candidate Working exploit published Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2010-2370 Medium 2010-07-13 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM.