Fusion Middleware vulnerabilities: known CVEs & security history
Oracle · Actively exploited · 29 tracked CVEs · 1 actively exploited · updated September 2026 · what is a CVE? →
This is the full list of known vulnerabilities (CVEs) across all Fusion Middleware release lines — 29 in total, with 1 actively exploited in the wild. A CVE here doesn't mean your version is affected — check Fusion Middleware's current status and the safe version to run.
Known Fusion Middleware CVEs
Actively-exploited and most-severe first. Open any CVE for full details.
| CVE | Severity | CVSS | EPSS | Year |
|---|---|---|---|---|
| CVE-2012-1710⚡ exploited | critical | 9.8 | 12% | 2012 |
| CVE-2026-60389 | critical | 10 | 0% | 2026 |
| CVE-2026-60379 | critical | 10 | 0% | 2026 |
| CVE-2026-60381 | critical | 9.9 | 0% | 2026 |
| CVE-2026-60377 | critical | 9.9 | 0% | 2026 |
| CVE-2026-60442 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60441 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60388 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60387 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60386 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60385 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60384 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60380 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60378 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60376 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60375 | critical | 9.8 | 0% | 2026 |
| CVE-2026-60374 | critical | 9.8 | 0% | 2026 |
| CVE-2020-10683 | critical | 9.8 | 7% | 2020 |
| CVE-2026-60861 | critical | 9.6 | 0% | 2026 |
| CVE-2026-60860 | high | 8.7 | 0% | 2026 |
| CVE-2026-60383 | high | 8.4 | 0% | 2026 |
| CVE-2021-2351 | high | 8.3 | 2% | 2021 |
| CVE-2026-60440 | high | 7.7 | 0% | 2026 |
| CVE-2026-60382 | high | 7.5 | 0% | 2026 |
| CVE-2019-10086 | high | 7.3 | 30% | 2019 |
| CVE-2026-60865 | medium | 6.8 | 0% | 2026 |
| CVE-2026-60866 | medium | 6.5 | 0% | 2026 |
| CVE-2019-10219 | medium | 6.1 | 2% | 2019 |
| CVE-2026-60501 | medium | 5.2 | 0% | 2026 |
Is my Fusion Middleware version affected?
The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.
Check your Fusion Middleware version → · Monitor Fusion Middleware for new CVEs →
Fusion Middleware vulnerabilities — frequently asked
How many known vulnerabilities does Fusion Middleware have?
IsItPatched tracks 29 CVEs for Fusion Middleware, 1 of which is actively exploited (CISA KEV). 19 are critical-severity and 6 high-severity. These span every release line — what matters is whether the version you run is affected.
Does Fusion Middleware have any actively-exploited vulnerabilities?
Yes — 1 Fusion Middleware CVE is in CISA's Known Exploited Vulnerabilities catalog, meaning it is confirmed exploited in the wild (1 linked to ransomware). Patch it as a priority.
What is the most severe Fusion Middleware vulnerability?
Among tracked issues, CVE-2012-1710 (CRITICAL, CVSS 9.8), which is actively exploited, ranks highest.
Is Fusion Middleware safe to use?
It depends on the version. The latest supported Fusion Middleware release clears the known issues; older versions may still be affected. Check the exact version you run for a verdict.
CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: Fusion Middleware security status · Fusion Middleware end-of-life · actively-exploited CVEs. Always verify against Oracle's advisories — see our disclaimer.