cbcvebase.

Oracle Weblogic Server Proxy Plug-In vulnerabilities

16 known vulnerabilities affecting oracle/weblogic_server_proxy_plug-in.

Total CVEs
16
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL11HIGH4MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2026-21962P1CRITICALCVSS 10.0KEVPoCv12.2.1.4.0v14.1.1.0.0+1 more2026-01-20
CVE-2026-21962 [CRITICAL] CWE-284 CVE-2026-21962: Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthent
nvd
CVE-2026-60365P2CRITICALCVSS 10.0v15.1.1.0.02026-07-21
CVE-2026-60365 [CRITICAL] CWE-306 CVE-2026-60365: Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (compo Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Serve
nvd
CVE-2026-60364P2CRITICALCVSS 9.8v12.2.1.4.0v14.1.2.0.02026-07-21
CVE-2026-60364 [CRITICAL] CWE-284 CVE-2026-60364: Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (compo Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle
nvd
CVE-2020-29508P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-29508 [CRITICAL] CWE-331 CVE-2020-29508: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.
nvd
CVE-2020-29506P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-29506 [CRITICAL] CWE-385 CVE-2020-29506: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.
nvd
CVE-2020-29507P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-29507 [CRITICAL] CWE-20 CVE-2020-29507: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper Input Validation Vulnerability.
nvd
CVE-2020-35169P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-35169 [CRITICAL] CWE-347 CVE-2020-35169: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.
nvd
CVE-2020-35163P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-35163 [CRITICAL] CWE-330 CVE-2020-35163: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of Insufficiently Random Values Vulnerability.
nvd
CVE-2020-35167P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-35167 [CRITICAL] CWE-200 CVE-2020-35167: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
nvd
CVE-2020-35166P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-35166 [CRITICAL] CWE-385 CVE-2020-35166: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
nvd
CVE-2020-35168P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-35168 [CRITICAL] CWE-311 CVE-2020-35168: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
nvd
CVE-2020-5360P3HIGHCVSS 7.5v11.1.1.9.0v12.1.3.0+1 more2020-12-16
CVE-2020-5360 [HIGH] CWE-127 CVE-2020-5360: Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnera Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the affected systems.
nvd
CVE-2020-35164P3HIGHCVSS 8.1v12.2.1.3.0v12.2.1.4.02022-07-11
CVE-2020-35164 [HIGH] CWE-385 CVE-2020-35164: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versio Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
nvd
CVE-2020-26184P3HIGHCVSS 7.5v12.2.1.3.0v12.2.1.4.02022-06-01
CVE-2020-26184 [HIGH] CWE-295 CVE-2020-26184: Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.
nvd
CVE-2020-26185P3HIGHCVSS 7.5v12.2.1.3.0v12.2.1.4.02022-06-01
CVE-2020-26185 [HIGH] CWE-20 CVE-2020-26185: Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability. Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.
nvd
CVE-2020-5359P4MEDIUMCVSS 5.8v11.1.1.9.0v12.2.1.3.0+1 more2020-12-16
CVE-2020-5359 [MEDIUM] CWE-544 CVE-2020-5359: Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value V Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data.
nvd
Oracle Weblogic Server Proxy Plug-In vulnerabilities | cvebase