https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-3007.htmlhttps://patchthecve.com/cve/CVE-2018-3007.htmlWed, 17 Jun 2026 01:56:48 +0000HIGH 8.6: Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While the vulnhttps://patchthecve.com/cve/CVE-2017-10278.htmlhttps://patchthecve.com/cve/CVE-2017-10278.htmlWed, 17 Jun 2026 01:00:01 +0000HIGH 7.0: Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. https://patchthecve.com/cve/CVE-2017-10272.htmlhttps://patchthecve.com/cve/CVE-2017-10272.htmlWed, 17 Jun 2026 01:00:00 +0000CRITICAL 9.9: Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via Jolt to compromise Oracle Tuxedo. While thttps://patchthecve.com/cve/CVE-2017-10269.htmlhttps://patchthecve.com/cve/CVE-2017-10269.htmlWed, 17 Jun 2026 01:00:00 +0000CRITICAL 10.0: Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While https://patchthecve.com/cve/CVE-2017-10267.htmlhttps://patchthecve.com/cve/CVE-2017-10267.htmlWed, 17 Jun 2026 01:00:00 +0000HIGH 7.5: Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. Succeshttps://patchthecve.com/cve/CVE-2017-10266.htmlhttps://patchthecve.com/cve/CVE-2017-10266.htmlWed, 17 Jun 2026 00:59:59 +0000MEDIUM 5.3: Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. Succeshttps://patchthecve.com/cve/CVE-2015-3197.htmlhttps://patchthecve.com/cve/CVE-2015-3197.htmlWed, 17 Jun 2026 00:25:31 +0000MEDIUM 5.9: ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and gethttps://patchthecve.com/cve/CVE-2007-5576.htmlhttps://patchthecve.com/cve/CVE-2007-5576.htmlTue, 16 Jun 2026 22:46:25 +0000MEDIUM 6.8: BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.https://patchthecve.com/cve/CVE-2003-0623.htmlhttps://patchthecve.com/cve/CVE-2003-0623.htmlTue, 16 Jun 2026 22:02:32 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument.https://patchthecve.com/cve/CVE-2003-0622.htmlhttps://patchthecve.com/cve/CVE-2003-0622.htmlTue, 16 Jun 2026 22:02:32 +0000MEDIUM 5.0: The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.https://patchthecve.com/cve/CVE-2003-0621.htmlhttps://patchthecve.com/cve/CVE-2003-0621.htmlTue, 16 Jun 2026 22:02:32 +0000MEDIUM 5.0: The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.https://patchthecve.com/cve/CVE-2001-1477.htmlhttps://patchthecve.com/cve/CVE-2001-1477.htmlTue, 16 Jun 2026 21:56:21 +0000MEDIUM 4.6: The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain.