WS
App Server
WebLogic Server
On CISA KEVExploited in the wildRansomware-linked
359
CVEs
16
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 107High 112Medium 124Low 4
Watch
Add WebLogic Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3510 | 9.8 | Jul 21 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality,… Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.0.0 |
| CVE-2016-3499 | 9.8 | Jul 21 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity,… Affected: 12.1.3.0.0; 12.2.1.0.0 |
| CVE-2016-0638 | 9.8 | Apr 21 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality,… Affected: 10.3.6.0.0; 12.1.2.0.0; 12.1.3.0.0; 12.2.1.0.0 |
| CVE-2026-87302 | 9.1 | Oct 20 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0 |
| CVE-2026-60208 | 9.1 | Jul 21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0 |
| CVE-2026-35298 | 9.1 | Jun 16 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core) Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0 |
| CVE-2024-21175 | 9.1 | Jul 16 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) Affected: 12.2.1.4.0; 14.1.1.0.0 |