# Oracle Fusion Middleware


- [CVE-2012-1710](https://insights.sbomify.com/CVE-2012-1710/): Oracle Fusion Middleware Unspecified (critical 9.8, exploited in the wild)
- [CVE-2012-3152](https://insights.sbomify.com/CVE-2012-3152/): Oracle Fusion Middleware Unspecified (critical 9.1, exploited in the wild)
- [CVE-2012-0518](https://insights.sbomify.com/CVE-2012-0518/): Oracle Fusion Middleware Unspecified (medium 4.7, exploited in the wild)
- [CVE-2013-2380](https://insights.sbomify.com/CVE-2013-2380/): Other in n/a (critical 10.0)
- [CVE-2012-3135](https://insights.sbomify.com/CVE-2012-3135/): Other in n/a (critical 10.0)
- [CVE-2010-3510](https://insights.sbomify.com/CVE-2010-3510/): Other in n/a (critical 10.0)
- [CVE-2020-10683](https://insights.sbomify.com/CVE-2020-10683/): dom4j allows External Entities by default which might enable XXE attacks (critical 9.8)
- [CVE-2010-3599](https://insights.sbomify.com/CVE-2010-3599/): Path traversal in n/a (critical 9.4)
- [CVE-2010-3591](https://insights.sbomify.com/CVE-2010-3591/): Path traversal in n/a (critical 9.3)
- [CVE-2020-5421](https://insights.sbomify.com/CVE-2020-5421/): RFD Protection Bypass via jsessionid (high 8.7)
- [CVE-2010-3592](https://insights.sbomify.com/CVE-2010-3592/): Other in n/a (high 8.5)
- [CVE-2021-2351](https://insights.sbomify.com/CVE-2021-2351/): Weak cryptography in WebLogic Server (high 8.3)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/fusion-middleware/