WS
App Server
WebLogic Server
On CISA KEVExploited in the wildRansomware-linked
359
CVEs
16
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 107High 112Medium 124Low 4
Watch
Add WebLogic Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0572 | – | Jan 21 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality,… Affected: 10.3.6.0.0; 12.1.2.0.0; 12.1.3.0.0; 12.2.1.0.0 |
| CVE-2010-4453 | – | Jan 19 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to… Affected: 7.0.7; 8.1.6; 9.0; 9.1; 9.2.4; 10.0.2; +2 more |
| CVE-2010-2375 | – | Jul 13 | Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1,… Affected: 10.3.2.0.0; 10.3.3.0.0 |
| CVE-2010-0073 | – | Apr 14 | Unspecified vulnerability in the WebLogic Server in Oracle WebLogic Server 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, and 10.3.2 allows remote attackers to affect… Affected: 7.0; 8.1; 9.0; 9.1; 9.2; 10.0; +1 more |
| CVE-2008-3257 | – | Jul 22 | Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary… Affected: through 10.3 |
| CVE-2008-2576 | – | Jul 15 | Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors Affected: 8.1; 9.0; 9.1; 9.2 |
| CVE-2008-2577 | – | Jul 15 | Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors Affected: 9.2 |
| CVE-2008-2578 | – | Jul 15 | Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors Affected: 9.2; 10.0 |
| CVE-2008-2579 | – | Jul 15 | Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7,… Affected: 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +34 more |