WS
App Server
WebLogic Server
On CISA KEVExploited in the wildRansomware-linked
359
CVEs
16
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 107High 112Medium 124Low 4
Watch
Add WebLogic Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-9488 | 3.7 | Apr 27 | Improper validation of certificate with host mismatch in Apache Log4j SMTP appender Affected: 10.3.6.0.0 |
| CVE-2016-0688 | 3.7 | Apr 21 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors… Affected: 10.3.6.0.0; 12.1.2.0.0; 12.1.3.0.0 |
| CVE-2020-8908 | 3.3 | Dec 10 | A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory… Affected: 14.1.1.0.0 |
| CVE-2021-1996 | 2.4 | Jan 20 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services) Affected: 10.3.6.0.0; 12.1.3.0.0 |
Showing 4