Login Request a demo
WS
App Server
WebLogic Server
by Oracle · last CVE Oct 20, 2026
On CISA KEVExploited in the wildRansomware-linked
359
CVEs
16
On KEV
10.0
Max CVSS
5
New 30D
Vulnerabilities359In the news5Timeline
Severity mix
Critical 107High 112Medium 124Low 4
Severity
All severities359Critical107High112Medium124Low4
Exploitation
On CISA KEV16Exploited in the wild16
Watch

Add WebLogic Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-2647
7.5
2%
Apr 23
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2018-15756
7.5
9%
Oct 18
DoS Attack via Range Requests
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2018-3246
7.5
3%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)
Affected: 12.1.3.0.0; 12.2.1.3; 12.2.1.3.0
CVE-2018-3213
7.5
4%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Docker Images)
Affected: before 12.2.1.3.0
CVE-2018-11040
7.5
3%
Jun 25
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON…
Affected: 12.2.1.3.0
CVE-2018-1000180
7.5
3%
Jun 5
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in…
Affected: 12.1.3.0.0
CVE-2016-8610
7.5
40%
Nov 13
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection…
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-3450
7.4
18%
Mar 25
CA certificate check bypass with X509_V_FLAG_X509_STRICT
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2026-91502
7.3
0%
Oct 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2019-10086
7.3
29%
Aug 20
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property…
Affected: 10.3.6.0.0
CVE-2026-60529
7.2
0%
Jul 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console)
Affected: 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60153
7.2
0%
Jul 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-34292
7.2
0%
Apr 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2109
7.2
70%
Jan 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-2963
7.2
1%
Apr 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2798
7.2
8%
Apr 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2549
7.2
2%
Jan 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components)
Affected: 10.3.6.0.0
CVE-2019-2890
7.2
37%
Oct 16
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2017-3531
7.2
2%
Apr 24
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime)
Affected: 12.1.3.0.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2026-60527
7.1
0%
Jul 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console)
Affected: 14.1.2.0.0; 15.1.1.0.0
CVE-2020-14757
6.8
2%
Oct 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services)
Affected: 12.2.1.3.0
CVE-2020-14557
6.8
1%
Jul 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container)
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2019-2452
6.7
2%
Jan 16
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 10.3.6.0; 12.1.3.0; 12.2.1.3
CVE-2026-35291
6.6
0%
Jun 16
Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console)
Affected: 14.1.2.0.0; 15.1.1.0.0
CVE-2021-44832
6.6
98%
Dec 28
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses…
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2026-34315
6.5
0%
Apr 21
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2025-30753
6.5
0%
Jul 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0
CVE-2023-22040
6.5
1%
Jul 18
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2022-21548
6.5
1%
Jul 19
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2022-23437
6.5
12%
Jan 24
Infinite loop within Apache XercesJ xml parser
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2022-21353
6.5
1%
Jan 19
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2022-21350
6.5
4%
Jan 19
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2022-21347
6.5
1%
Jan 19
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2022-21252
6.5
1%
Jan 19
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples)
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2294
6.5
1%
Apr 22
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-1995
6.5
1%
Jan 20
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services)
Affected: 10.3.6.0.0; 12.1.3.0.0
CVE-2020-5421
6.5
12%
Sep 19
RFD Protection Bypass via jsessionid
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14652
6.5
1%
Jul 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2019-3740
6.5
4%
Sep 18
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2019-3739
6.5
3%
Sep 18
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation
Affected: 10.3.6.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2019-2418
6.5
1%
Jan 16
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)
Affected: 10.3.6.0; 12.1.3.0; 12.2.1.3
CVE-2018-3249
6.5
2%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)
Affected: 10.3.6.0.0
CVE-2018-3248
6.5
2%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)
Affected: 10.3.6.0.0
CVE-2018-1257
6.5
3%
May 11
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a…
Affected: 10.3.6.0.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2017-10152
6.5
2%
Oct 19
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container)
Affected: 10.3.6.0.0; 12.1.3.0.0
CVE-2016-5601
6.3
0%
Oct 25
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentiality and…
Affected: 12.1.3.0.0; 12.2.1.0.0; 12.2.1.1.0
CVE-2017-15707
6.2
5%
Dec 1
In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially…
Affected: 12.2.1.2; 12.2.1.3
CVE-2025-50073
6.1
0%
Jul 15
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0
CVE-2024-20986
6.1
0%
Feb 17
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2023-21956
6.1
0%
Apr 18
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container)
Affected: 12.2.1.4.0; 14.1.1.0.0
Page 5 of 8 · 359 total
1…456…8