Oracle Fusion Middleware 12c Premier Support Ends December 31, 2026

By Scott Bissett  ·  Published: October 11, 2026  ·  EOL Watch — deadline analysis  ·  Dates read on October 11, 2026 from Oracle's Fusion Middleware Lifetime Support Policy document (the edition with an April 2026 effective date), pages 3 to 7 and 10; dates as we serve them.

Oracle's Lifetime Support Policy for Fusion Middleware gives the 12c release line, the 12.2.1.x versions most estates still run, a Premier Support end of December 2026. The Oracle Fusion Middleware Lifetime Support Policy document carries one row for the whole release, "Fusion Middleware 12c (12.2.x)", with a GA window of October 2015 to April 2016, Premier Support ending December 2026, Extended Support ending December 2027 and Sustaining Support indefinite. The document's own note on dates applies: unless otherwise noted, each stage of support is provided through the last day of the month. So Premier Support for WebLogic Server, Forms and Reports, HTTP Server, SOA Suite and Application Development Framework 12.2.1.x ends on December 31, 2026, and Extended Support on December 31, 2027. Oracle never calls either date end of life, and this guide does not either. What the dates change is which Oracle support stage the software is in, and the stages differ in exactly one thing that matters to a security team: whether new fixes are produced.

Premier, Extended, Sustaining: what each stage includes, in Oracle's terms

Oracle's policy document describes the three stages on pages 3 and 4. Paraphrasing it, with Oracle's wording quoted where the exact words matter:

Premier Support is the standard five-year stage from general availability. Its benefit list includes major product and technology releases, technical support, access to My Oracle Support, "Updates, fixes, security alerts, data fixes, and critical patch updates", upgrade scripts, and certification with most new third-party and Oracle products.

Extended Support adds "an extra three years of support for specific Oracle releases for an additional fee". Its benefit list repeats the Premier line on updates, fixes, security alerts, data fixes and Critical Patch Updates; what narrows is certification, which covers "most existing" third-party and Oracle products rather than new ones, and the document adds that Extended Support may not include certification with some new third-party products.

Sustaining Support is what follows "for as long as you license your Oracle products", whether Premier ended without Extended being purchased or Extended has ended. It includes technical support, My Oracle Support access, major releases, and the fixes and Critical Patch Updates "created during Premier Support and Extended Support". Its exclusion list is the one to read: Sustaining Support does not include "New updates, fixes, security alerts, data fixes, and critical patch updates", new tax, legal and regulatory updates, new upgrade scripts, certification with new products, or the 24-hour Severity 1 commitment.

The five product lines we track, 12c and 14c

Oracle's document lists Fusion Middleware as one row per release and names the included products in a footnote. The footnote on the 12.2.x row names, among others, WebLogic Server, Coherence, TopLink, HTTP Server, WebLogic Server Proxy Plug-In, SOA Suite, Business Process Management, Service Bus, Managed File Transfer, Data Integrator, JDeveloper and Application Development Framework, Forms and Reports, and the WebCenter products; the footnote on the 14.1.x row names the same core set. We serve five of them as separate products, and every date below is rewritten from our data at each build. "Premier Support ends" is our eol field for these products and "Extended Support ends" our extendedSupport field; Oracle's GA dates are month ranges, so no release day is shown.

Three things the table cannot show. First, the 12.2.x row's GA window is October 2015 to April 2016, so Premier Support for this release has run eleven years, more than twice Oracle's standard five, through what the document's footnotes record as extensions. Second, the 12c dates are release-level; which 12.2.1.x patch set gets fixes within those dates is a separate question, governed by what the document calls the Oracle Fusion Middleware Error Correction Policy (My Oracle Support Doc ID 209768.1, with specific dates in Doc ID 1933372.1, both behind a support login). The document's own footnote 2 is an example: the error correction period for 12.2.1.3 was extended through December 2022, and through June 2023 for WebLogic Server and Coherence, with content "limited to P1 requests and security updates". A 12.2.1.3 server has been outside error correction since then regardless of the Premier date. Third, Oracle also lists WebLogic Server 15.x separately from Fusion Middleware 14.1.x, with its own dates two months earlier in the year; the other four products have no 15c line.

Every earlier line is in Sustaining Support: Fusion Middleware 12.1.x left Extended Support in December 2019 (WebLogic Server and Coherence 12.1.3 got a further Extended Support period to January 2022 under footnote 4), 11gR1 in December 2021, and the Forms and Reports 11g lines are covered in our Oracle legacy middleware guide.

The exploitation record

These are not products that can wait out a support gap quietly. WebLogic Server has 14 entries in CISA's Known Exploited Vulnerabilities catalog, 2 of which carry CISA's known-ransomware-campaign-use flag; the entries run from CVE-2015-4852 to CVE-2026-21962, and the majority describe an unauthenticated attacker with network access over T3 or IIOP. HTTP Server has 1 entry, Forms and Reports 1 entry and ADF 1 entry; SOA Suite has none of its own, though it runs on WebLogic. The newest entry, CVE-2026-21962, names "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in" and was added to the catalog on August 24, 2026 with a federal due date of August 27, 2026. CISA's description, verbatim: "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data." Its notes point to Oracle's January 2026 Critical Patch Update advisory. Our guide to that entry covers which releases the CPU fixed.

The relevance to the December date is the delivery mechanism. Every one of those entries was fixed through a Critical Patch Update, and a Critical Patch Update is exactly what Sustaining Support does not include. The CPU is quarterly; the KEV catalog adds Oracle middleware entries most years; and from January 2027 a 12.2.1.x estate without Extended Support has no path from one to the other except an upgrade.

Where a 12.2.1.4 estate goes

Fusion Middleware 14c (14.1.x). Oracle's document lists it with a GA of December 2024, Premier Support ending December 31, 2030 and Extended Support ending December 31, 2033, and its footnote names the same core products: Forms and Reports, HTTP Server, Web Server Plug-ins, WebLogic Server, SOA Suite, Service Bus, JDeveloper and Application Development Framework among them. It is an in-family upgrade for each of the five products above. For WebLogic Server alone there is also WebLogic Server 15.x, Premier Support to October 31, 2030; whether a Forms, SOA or ADF workload can sit on it is a certification question for Oracle's matrices, not for this page.

Extended Support as a bridge. For an estate that cannot complete a 14c upgrade in 2026, Extended Support to December 31, 2027 keeps the Critical Patch Updates flowing for one more year, at Oracle's additional fee and with the certification caveats above. It is a year, not a plan: the same Sustaining Support cliff arrives in January 2028.

Third-party support. A commercial market exists for post-Oracle-support patching and break-fix on Oracle middleware estates; what is covered varies sharply by vendor and product, and that is what the form above matches. It does not restore Oracle's Critical Patch Updates; it substitutes someone else's engineering for them.

Documented risk acceptance. If a 12c system is isolated and scheduled for decommission, write that down, with dates. For anything internet-facing, the KEV record above is the argument against it.

What to do

1. Inventory by patch set, not just by release. Find every WebLogic, Forms, HTTP Server, SOA Suite and ADF instance and record the full version (12.2.1.4.0 or 12.2.1.3.0, say). The Premier date is the same for both; the error correction status is not.
2. Decide Extended Support before the December Critical Patch Update. The first CPU that falls under Extended Support terms is January 2027. A contract decision made after that date buys a year that has already started.
3. Plan the 14c upgrade as a 2027 project at the latest. Premier Support for 14.1.x runs to December 31, 2030, which gives a 2027 migration three full years before the next decision.
4. Watch the live pages. The WebLogic Server, Forms and Reports, HTTP Server, SOA Suite and ADF pages carry every release with its Premier and Extended dates, verified against Oracle's document and refreshed at every build; a new edition of the policy document shows up there first.

Frequently Asked Questions

Related

• Oracle WebLogic Server · Oracle Forms and Reports · Oracle HTTP Server · Oracle SOA Suite · Oracle ADF — every release with its Premier and Extended Support dates
• CVE-2026-21962: the HTTP Server and WebLogic Proxy Plug-in KEV entry — which releases the January 2026 CPU fixed
• The July 2026 Critical Patch Update and unsupported Oracle releases — what a CPU does and does not cover
• Oracle legacy middleware — Forms 11g, Discoverer, Endeca and the Sustaining Support pattern
• Oracle Database end of life — the same three stages on the database side
• Exploited & Unpatchable — the feed of KEV entries on products past their fix window
• How we verify our dates — the rules every number on this site is held to