Product of Oracle

Fusion Middleware

As of , 6 Oracle Fusion Middleware vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2012-3152.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2012-3152UnspecifiedOracle Fusion MiddlewarePatch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry0.99
2CVE-2021-35587UnspecifiedOracle Fusion MiddlewarePatch this weekMetasploit module; EPSS 0.960.96
3CVE-2025-61757Missing Authentication for Critical FunctionOracle Fusion MiddlewarePatch this weekEPSS 0.890.89
4CVE-2020-2551UnspecifiedOracle Fusion MiddlewarePatch this weekEPSS 0.930.93
5CVE-2012-1710UnspecifiedOracle Fusion MiddlewarePatch this weekRansomware use0.08
6CVE-2012-0518UnspecifiedOracle Fusion MiddlewarePatch soon0.05

Added each year

1232021: 1120212022: 3320222023: 1120232024: nonenone20242025: 1120252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20211
20223
20231
2024none
20251
2026none

Used in ransomware

Changes CISA made to these entries

  1. CVE-2012-1710 Oracle Fusion MiddlewareRansomware use: Unknown to Known.

Every change we recorded