Login Request a demo
WS
App Server
WebLogic Server
by Oracle · last CVE Oct 20, 2026
On CISA KEVExploited in the wildRansomware-linked
359
CVEs
16
On KEV
10.0
Max CVSS
5
New 30D
Vulnerabilities359In the news5Timeline
Severity mix
Critical 107High 112Medium 124Low 4
Severity
All severities359Critical107High112Medium124Low4
Exploitation
On CISA KEV16Exploited in the wild16
Watch

Add WebLogic Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-22965
In wildKEV
9.8
100%
Apr 1
Spring Framework JDK 9+ Remote Code Execution Vulnerability
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14750
In wildKEV
9.8
99%
Nov 1
Oracle WebLogic Server Remote Code Execution Vulnerability
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14882
In wildKEV
9.8
100%
Oct 21
Oracle WebLogic Server Remote Code Execution Vulnerability
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14644
In wildKEV
9.8
95%
Jul 15
Oracle WebLogic Server Remote Code Execution Vulnerability
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-2883
In wildKEV
9.8
95%
Apr 15
Oracle WebLogic Server Unspecified Vulnerability
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2551
In wildKEV
9.8
93%
Jan 15
Oracle Fusion Middleware Unspecified Vulnerability
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2725
RansomwareIn wildKEV
9.8
100%
Apr 26
Oracle WebLogic Server, Injection
Affected: 10.3.6.0.0; 12.1.3.0.0
CVE-2018-2628
In wildKEV
9.8
100%
Apr 19
Oracle WebLogic Server Unspecified Vulnerability
Affected: 10.3.6.0; 12.1.3.0; 12.2.1.2; 12.2.1.3
CVE-2017-5638
RansomwareIn wildKEV
9.8
100%
Mar 11
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload…
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2015-4852
In wildKEV
9.8
95%
Nov 18
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
Affected: 10.3.6.0.0; 12.1.2.0.0; 12.1.3.0.0; 12.2.1.0.0
CVE-2024-21182
In wildKEV
7.5
74%
Jul 16
Oracle WebLogic Server Unspecified Vulnerability
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2023-21839
In wildKEV
7.5
100%
Jan 17
Oracle WebLogic Server Unspecified Vulnerability
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2017-10271
RansomwareIn wildKEV
7.5
100%
Oct 19
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2017-3506
In wildKEV
7.4
96%
Apr 24
Oracle WebLogic Server OS Command Injection Vulnerability
Affected: 10.3.6.0; 12.1.3.0; 12.2.1.0; 12.2.1.1; 12.2.1.2
CVE-2020-14883
In wildKEV
7.2
98%
Oct 21
Oracle WebLogic Server Unspecified Vulnerability
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
Showing 16