Vulnerabilities > Oracle > Fusion Middleware > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-05-01 CVE-2020-10683 XXE vulnerability in multiple products
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks.
network
low complexity
dom4j-project oracle opensuse netapp canonical CWE-611
critical
9.8
2013-04-17 CVE-2013-2380 Remote Security vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware R27.7.4 and earlier and R28.2.6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
network
low complexity
oracle
critical
10.0
2012-07-17 CVE-2012-3135 Unspecified vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.3 and before, and 27.7.2 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
network
low complexity
oracle
critical
10.0
2012-05-03 CVE-2012-1695 Remote Security vulnerability in Oracle JRockit
Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
network
low complexity
oracle sun
critical
10.0
2011-01-19 CVE-2010-3510 Remote Security vulnerability in Oracle WebLogic Server
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.3, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Node Manager.
network
low complexity
oracle
critical
10.0
2011-01-19 CVE-2010-3591 Remote vulnerability in Oracle Fusion Middleware 10.1.3.4/10.1.3.5
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations.
network
oracle
critical
9.3
2011-01-19 CVE-2010-3599 Remote vulnerability in Oracle Fusion Middleware 10.1.3.4/10.1.3.5
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server.
network
low complexity
oracle
critical
9.4