Oracle Fusion Middleware: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-1947106 linked CVEs
Open advisory with all CVEs
More on Middleware
Other advisories
- CriticalCVE-2019-25211Gin CORS middleware vulnerability
- Not ratedosv:openSUSE-SU-2026:12405-1perl-Plack-Middleware-ReverseProxy-0.170.0-1.1 on GA media
- Not ratedosv:CVE-2026-120445madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware
- Not ratedosv:CVE-2026-120192Presenton Desktop Authentication Middleware app_data information disclosure
- Not ratedosv:CLEANSTART-2025-SP41808avatar middleware in Gitea before 1
- Not ratedosv:CLEANSTART-2026-RF79394In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http
- Not ratedosv:CLEANSTART-2026-WD98383body-parser is body parsing middleware for Node
- Not ratedosv:CLEANSTART-2026-JC13897In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http
Other news entries
- NCSC-2026-0448 [1.00] [H/H] Kwetsbaarheden verholpen in Oracle Fusion MiddlewareNewsNCSC-NL
- Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPUNewsSecurityWeek
- Oracle Fusion Middleware: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- SWIFT Banking & Government Middleware Enables RCENewsDark Reading
- Oracle’s September patches put Fusion Middleware back in the hot seatNewsCSO Online
- NCSC-2026-0377 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Enterprise ManagerNewsNCSC-NL
- NCSC-2026-0372 [1.00] [H/H] Kwetsbaarheden verholpen in Oracle Fusion MiddlewareNewsNCSC-NL
- Oracle Fusion Middleware: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1947
ID