CVE-2015-2623: Oracle Fusion Middleware

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.

Affected products

• Oracle Fusion Middleware: version 3.0.1 only; version 3.1.2 only; version 10.3.6 only; version 12.1.1 only; version 12.1.2.0.0 only; version 12.1.3.0.0 only

Published 2015-07-16. Last modified 2026-06-17.