Sploitus

24 exploited vulnerabilities in Oracle Fusion Middleware

Vulnerabilities with publicly known exploits

Vendors
Oracle, Htmlunit, Atlassian, Apache, Microsoft
With known exploits
24
Affected Oracle Platform Security For Java versions
= 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0
Affected Oracle Weblogic Server versions
= 10.3.6.0.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0
Affected Oracle Fusion Middleware versions
= 10.1.3.4, 10.1.3.5, 11.1.1.4.0, 11.1.1.6.0, 11.1.2.0, 7.4.0, 7.5.1.1, 2.2.2, 11.1.1.7.0, 11.1.1.1.0, 11.1.1.2.0, 8.3.5.0, 8.3.7.0, 8.4.1, 8.5.0, 8.5.1, 8.5.2, 8.4
Affected Htmlunit versions
< 2.61.0
Affected Oracle Business Intelligence Publisher versions
= 11.1.1.7.0, 11.1.1.9.0, 12.2.1.0.0, 12.2.1.3.0, 12.2.1.4.0
Affected Oracle Beehive versions
= 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, 2.0.1.3
Affected Oracle Identity Manager versions
= 11.1.2.1.0
Affected Oracle Netbeans versions
= 8.1

Vulnerabilities with exploits

Highest CVSS first — 23 of these already have exploit code on Sploitus

CVE-2021-2302 2 exploits
CVSS 9.8 CRITICAL 2021-04-22
CVE-2017-3248 18 exploits
CVSS 9.8 CRITICAL 2017-01-24FIX AVAILABLE
CVE-2010-3599 5 exploits
CVSS 9.4 HIGH 2011-01-19
CVE-2010-3591 10 exploits
CVSS 9.3 HIGH 2011-01-19
CVE-2022-29546
CVSS 7.5 HIGH 2022-04-25
CVE-2010-3595 5 exploits
CVSS 7.8 HIGH 2011-01-19FIX AVAILABLE
CVE-2016-3473 2 exploits
CVSS 7.7 HIGH 2016-10-25
CVE-2010-4417 4 exploits
CVSS 7.5 HIGH 2011-01-18
CVE-2019-2616 4 exploits
CVSS 7.2 HIGH 2019-04-16
CVE-2012-3153 11 exploits
CVSS 6.4 MEDIUM 2012-10-16
CVE-2012-3152 10 exploits
CVSS 9.1 CRITICAL 2012-10-16
CVE-2014-2880 1 exploit
CVSS 5.8 MEDIUM 2014-04-17
CVE-2016-5537 4 exploits
CVSS 5.7 MEDIUM 2016-10-25FIX AVAILABLE
CVE-2013-3763 8 exploits
CVSS 5.5 MEDIUM 2013-07-17
CVE-2019-2588 4 exploits
CVSS 4.9 MEDIUM 2019-04-16FIX AVAILABLE
CVE-2014-2399 4 exploits
CVSS 4.3 MEDIUM 2014-04-16
CVE-2014-2424 5 exploits
CVSS 4.0 MEDIUM 2014-04-16FIX AVAILABLE
CVE-2010-3581 2 exploits
CVSS 3.5 LOW 2010-10-14
CVE-2012-1744 1 exploit
CVSS 2.1 LOW 2012-07-17FIX AVAILABLE
CVE-2015-0493 1 exploit
CVSS 1.5 LOW 2015-04-16FIX AVAILABLE
CVE-2015-0474 1 exploit
CVSS 1.5 LOW 2015-04-16
CVE-2015-4877 2 exploits
CVSS 1.5 LOW 2015-10-21
CVE-2015-4878 2 exploits
CVSS 1.5 LOW 2015-10-21
CVE-2013-5791 5 exploits
CVSS 1.5 LOW 2013-10-16FIX AVAILABLE