Login Request a demo
WS
App Server
WebLogic Server
by Oracle · last CVE Oct 20, 2026
On CISA KEVExploited in the wildRansomware-linked
359
CVEs
16
On KEV
10.0
Max CVSS
5
New 30D
Vulnerabilities359In the news5Timeline
Severity mix
Critical 107High 112Medium 124Low 4
Severity
All severities359Critical107High112Medium124Low4
Exploitation
On CISA KEV16Exploited in the wild16
Watch

Add WebLogic Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-23457
9.8
3%
Apr 25
ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2022-21306
9.8
4%
Jan 19
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2022-23305
9.8
67%
Jan 18
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-23450
9.8
30%
Dec 17
Prototype Pollution
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2021-35617
9.8
2%
Oct 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container)
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2397
9.8
2%
Jul 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2394
9.8
76%
Jul 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2382
9.8
2%
Jul 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Security)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2136
9.8
2%
Apr 22
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2135
9.8
8%
Apr 22
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container)
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-21350
9.8
15%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-21347
9.8
14%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2108
9.8
4%
Jan 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components)
Affected: 12.1.3.0.0
CVE-2021-2075
9.8
4%
Jan 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2064
9.8
4%
Jan 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components)
Affected: 12.1.3.0.0
CVE-2021-2047
9.8
4%
Jan 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2021-1994
9.8
5%
Jan 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services)
Affected: 10.3.6.0.0; 12.1.3.0.0
CVE-2020-14859
9.8
4%
Oct 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14841
9.8
52%
Oct 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14825
9.8
30%
Oct 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14687
9.8
2%
Jul 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14645
9.8
47%
Jul 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14625
9.8
10%
Jul 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-2884
9.8
2%
Apr 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2801
9.8
3%
Apr 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-9546
9.8
5%
Mar 2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-9547
9.8
18%
Mar 2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-9548
9.8
19%
Mar 2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2546
9.8
5%
Jan 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - JavaEE)
Affected: 10.3.6.0.0; 12.1.3.0.0
CVE-2019-20330
9.8
9%
Jan 3
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-17571
9.8
70%
Dec 20
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with…
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2019-17195
9.8
11%
Oct 15
Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-17531
9.8
5%
Oct 12
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-17267
9.8
5%
Oct 6
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
Affected: 12.2.1.3.0
CVE-2019-16943
9.8
5%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-16942
9.8
6%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-16335
9.8
5%
Sep 15
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
Affected: 12.2.1.3.0
CVE-2019-14540
9.8
11%
Sep 15
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
Affected: 12.2.1.3.0
CVE-2019-2856
9.8
2%
Jul 23
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE)
Affected: 12.2.1.3.0
CVE-2019-2729
9.8
89%
Jun 19
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2019-2658
9.8
2%
Apr 23
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 10.3.6.0.0; 12.1.3.0.0
CVE-2019-2646
9.8
2%
Apr 23
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: EJB Container)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2019-2645
9.8
2%
Apr 23
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2018-3252
9.8
30%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2018-3245
9.8
94%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2018-3201
9.8
3%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 12.2.1.3.0
CVE-2018-3197
9.8
3%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 12.1.3.0.0
CVE-2018-3191
9.8
63%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2018-2894
9.8
50%
Jul 18
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.2.0; 12.2.1.3
CVE-2018-2893
9.8
70%
Jul 18
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.2.0; 12.2.1.3
Page 2 of 8 · 359 total
123…8