[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcNv8BuFMmJ_FB2wYt2lANYw1yBK6eYXFv8KSo-k6W6s":3,"g5a-ex:oracle\u002Fenterprise_manager_for_fusion_middleware@*":97,"g5a-family:oracle\u002Fenterprise_manager_for_fusion_middleware":99},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":74,"seoMetadata":75,"meta":94},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"oracle","enterprise_manager_for_fusion_middleware",5,6,0,"2020-01-15",[14,18,20,23,25],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"11.1.1.7",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"11.1.1.9",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"12.1.0.5",3,{"version":24,"cve_count":22,"kev_count":11,"has_kev":17},"13.2.0.0",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"13.3.0.0",2,"Enterprise Manager For Fusion Middleware by Oracle is a technology product with 5 tracked versions and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":22,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},[36,44,51,58,63,70],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":43},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,"v3.1","High",0.9194,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":41,"severity":49,"isKev":17,"epssScore":50},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"Critical",0.89792,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":41,"severity":56,"isKev":17,"epssScore":57},"CVE-2018-8032","Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet\u002Fservices.","2018-08-02",6.1,"Medium",0.10554,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":48,"cvssVersion":41,"severity":49,"isKev":17,"epssScore":62},"CVE-2018-1000613","Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS\u002FXMSS^MT private key deserialization that can result in Deserializing an XMSS\u002FXMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.","2018-07-09",0.04767,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":68,"severity":56,"isKev":17,"epssScore":69},"CVE-2016-3496","Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Enterprise Manager Grid Control 11.1.1.7, and 11.1.1.9 allows remote attackers to affect confidentiality via vectors related to SOA Topology Viewer.","2016-07-21",4.7,"v3.0",0.02014,{"cveId":71,"description":72,"publishedDate":12,"cvssScore":10,"cvssVersion":41,"severity":56,"isKev":17,"epssScore":73},"CVE-2020-2614","Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: APM Mesh). Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager for Fusion Middleware accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager for Fusion Middleware accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager for Fusion Middleware. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L).",0.01159,[],{"title":76,"metaDescription":77,"keywords":78,"structuredData":79},"Enterprise Manager For Fusion Middleware by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Manager For Fusion Middleware by Oracle covering 5 versions with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Manager For Fusion Middleware vulnerabilities, Enterprise Manager For Fusion Middleware security, Enterprise Manager For Fusion Middleware CVE, Oracle Enterprise Manager For Fusion Middleware, Enterprise Manager For Fusion Middleware threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":80,"@type":81,"name":82,"description":77,"url":83,"manufacturer":84,"applicationCategory":88,"softwareVersion":89,"mainEntity":90},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Manager For Fusion Middleware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fenterprise_manager_for_fusion_middleware",{"@type":85,"name":86,"url":87},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","5 versions tracked",{"@type":91,"name":92,"description":93,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Manager For Fusion Middleware Security Vulnerabilities","Security vulnerabilities affecting Enterprise Manager For Fusion Middleware by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":95,"apiVersion":96},"2026-10-17T14:43:18.651Z","3.0",{"rows":98,"total":11,"capped":17,"failed":11},[],[]]