Oracle Weblogic Server vulnerabilities
359 known vulnerabilities affecting oracle/weblogic_server.
Total CVEs
359
CISA KEV
16
actively exploited
Public exploits
38
Exploited in wild
34
Severity breakdown
CRITICAL107HIGH117MEDIUM131LOW4
Vulnerabilities
Page 15 of 18
CVE-2019-2824P4MEDIUMCVSS 5.5v10.3.6.0.0v12.1.3.0.0+1 more2019-07-23
CVE-2019-2824 [MEDIUM] CVE-2019-2824: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vul
nvd
CVE-2019-2827P4MEDIUMCVSS 5.5v10.3.6.0.0v12.1.3.0.0+1 more2019-07-23
CVE-2019-2827 [MEDIUM] CVE-2019-2827: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vul
nvd
CVE-2019-2441P4MEDIUMCVSS 5.3v12.2.1.32019-01-16
CVE-2019-2441 [MEDIUM] CVE-2019-2441: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: App
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE). The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can re
nvd
CVE-2018-2998P4MEDIUMCVSS 5.4v10.3.6.0.0v12.1.3.0.0+2 more2018-07-18
CVE-2018-2998 [MEDIUM] CVE-2018-2998: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: SAM
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: SAML). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability c
nvd
CVE-2021-35552P4MEDIUMCVSS 5.3v12.2.1.3.0v12.2.1.4.0+1 more2021-10-20
CVE-2021-35552 [MEDIUM] CVE-2021-35552: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Diagnost
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Diagnostics). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability
nvd
CVE-2025-61764P4MEDIUMCVSS 5.3v12.2.1.4.0v14.1.1.0.0+1 more2025-10-21
CVE-2025-61764 [MEDIUM] CWE-200 CVE-2025-61764: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability c
nvd
CVE-2021-27568P4MEDIUMCVSS 5.9v12.2.1.3.0v12.2.1.4.0+1 more2021-02-23
CVE-2021-27568 [MEDIUM] CWE-754 CVE-2021-27568: An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. A
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.
nvd
CVE-2016-3445P4MEDIUMCVSS 5.3v10.3.6.0.0v12.1.3.0.02016-07-21
CVE-2016-3445 [MEDIUM] CVE-2016-3445: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488.
nvd
CVE-2018-3250P4MEDIUMCVSS 6.1v10.3.6.0.02018-10-17
CVE-2018-3250 [MEDIUM] CVE-2018-3250: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person
nvd
CVE-2016-5488P4MEDIUMCVSS 5.3v10.3.6.0.0v12.1.3.0.02016-10-25
CVE-2016-5488 [MEDIUM] CVE-2016-5488: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445.
nvd
CVE-2017-10178P4MEDIUMCVSS 6.1v10.3.6.0.0v12.1.3.0.0+2 more2017-08-08
CVE-2017-10178 [MEDIUM] CVE-2017-10178: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require hum
nvd
CVE-2018-2987P4MEDIUMCVSS 6.1v10.3.6.0.0v12.1.3.0.0+2 more2018-07-18
CVE-2018-2987 [MEDIUM] CVE-2018-2987: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Con
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human inter
nvd
CVE-2020-14636P4MEDIUMCVSS 6.1v12.1.3.0.0v12.2.1.3.0+2 more2020-07-15
CVE-2020-14636 [MEDIUM] CVE-2020-14636: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample a
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require hu
nvd
CVE-2020-14640P4MEDIUMCVSS 6.1v12.1.3.0.0v12.2.1.3.0+2 more2020-07-15
CVE-2020-14640 [MEDIUM] CVE-2020-14640: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample a
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require hu
nvd
CVE-2020-14638P4MEDIUMCVSS 6.1v12.1.3.0.0v12.2.1.3.0+2 more2020-07-15
CVE-2020-14638 [MEDIUM] CVE-2020-14638: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample a
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require hu
nvd
CVE-2020-14637P4MEDIUMCVSS 6.1v12.1.3.0.0v12.2.1.3.0+2 more2020-07-15
CVE-2020-14637 [MEDIUM] CVE-2020-14637: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample a
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require hu
nvd
CVE-2020-2811P4MEDIUMCVSS 6.1v10.3.6.0.0v12.1.3.0.0+2 more2020-04-15
CVE-2020-2811 [MEDIUM] CVE-2020-2811: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console)
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human in
nvd
CVE-2022-21361P4MEDIUMCVSS 6.1v12.2.1.4.0v14.1.1.0.02022-01-19
CVE-2022-21361 [MEDIUM] CVE-2022-21361: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample a
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a p
nvd
CVE-2022-21386P4MEDIUMCVSS 6.1v12.1.3.0.0v12.2.1.3.0+2 more2022-01-19
CVE-2022-21386 [MEDIUM] CVE-2022-21386: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Cont
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require
nvd
CVE-2022-21453P4MEDIUMCVSS 6.1v12.2.1.3.0v12.2.1.4.0+1 more2022-04-19
CVE-2022-21453 [MEDIUM] CVE-2022-21453: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console)
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction
nvd