WebLogic Server vulnerabilities | LiveThreat CVE Feed

App Server

WebLogic Server

by Oracle · last CVE Oct 20, 2026

On CISA KEVExploited in the wildRansomware-linked

359

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities359 In the news5 Timeline

Severity mix

Critical 107High 112Medium 124Low 4

Severity

All severities359 Critical107 High112 Medium124 Low4

Exploitation

On CISA KEV16 Exploited in the wild16

Watch

Add WebLogic Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-2934	5.0	3%	Apr 15	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J) Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2019-2568	5.0	1%	Apr 23	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2020-14622	4.9	1%	Jul 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-2829	4.9	1%	Apr 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Management Services) Affected: 10.3.6.0.0
CVE-2019-2615	4.9	6%	Apr 23	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2018-2933	4.9	1%	Aug 2	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components) Affected: 10.3.6.0; 12.1.3.0; 12.2.1.2; 12.2.1.3
CVE-2025-50064	4.8	0%	Jul 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0
CVE-2021-29425	4.8	11%	Apr 13	Possible limited path traversal vulnerabily in Apache Commons IO Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-2552	4.8	1%	Jan 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components) Affected: 10.3.6.0.0; 12.1.3.0.0
CVE-2020-2548	4.8	1%	Jan 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components) Affected: 10.3.6.0.0
CVE-2020-2547	4.8	1%	Jan 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2017-10063	4.8	2%	Aug 8	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2023-22031	4.4	1%	Jul 18	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2214	4.4	1%	Apr 22	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2033	4.3	2%	Jan 20	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components) Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-2869	4.3	1%	Apr 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2544	4.3	1%	Jan 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2519	4.3	1%	Jan 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2887	4.3	1%	Oct 16	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2019-2398	4.3	1%	Jan 16	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Deployment) Affected: 10.3.6.0; 12.1.3.0; 12.2.1.3
CVE-2018-2902	4.3	2%	Oct 17	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console) Affected: 10.3.6.0.0; 12.1.3.0.0
CVE-2017-10334	4.3	1%	Oct 19	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container) Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2017-10123	4.3	1%	Aug 8	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container) Affected: 12.1.3.0.0
CVE-2025-50072	4.0	0%	Jul 15	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0