CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5181 matches found

Positive Technologies•added 2026/08/18 12:00 a.m.•19 views

PT-2026-77356

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue in the Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via T3 and IIOP protocols to...

8.6CVSS5.2AI score0.00414EPSS

SaveExploits0References4

Positive Technologies•added 2026/08/18 12:00 a.m.•22 views

PT-2026-77349

9.8CVSS5.2AI score0.00508EPSS

SaveExploits0References4

Positive Technologies•added 2026/08/18 12:00 a.m.•32 views

PT-2026-77344

8.1CVSS5.1AI score0.00424EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•4 views

CVE-2026-60679: Improper Authentication

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via T3, IIOP to...

7.5CVSS5.7AI score0.00334EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•4 views

CVE-2026-60698: Missing Authentication for Critical Function

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise...

9.8CVSS5.7AI score0.00508EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•5 views

CVE-2026-60699: Improper Access Control

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

8.6CVSS5.7AI score0.00414EPSS

SaveExploits0References3

Positive Technologies•added 2026/08/18 12:00 a.m.•28 views

PT-2026-77351

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description A flaw in the Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the server...

8.1CVSS5.3AI score0.0038EPSS

SaveExploits0References4

VulnCheck KEV•added 2026/08/15 12:00 a.m.•19 views

VulnCheck KEV: CVE-2021-2109

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP...

7.2CVSS7.1AI score0.70447EPSS

SaveIn wildExploits7References12

Tenable Nessus•added 2026/07/31 12:00 a.m.•19 views

Oracle PeopleSoft PeopleTools Multiple Vulnerabilities (CSPU Jun 2026)

The version of Oracle PeopleSoft PeopleTools installed on the remote host is 8.61.x prior to 8.61.20 or 8.62.x prior to 8.62.10. It is, therefore, affected by multiple vulnerabilities as noted in the June 2026 Critical Security Patch Update advisory, whose patches also resolve Oracle Security Ale...

9.8CVSS8.2AI score0.96678EPSS

SaveExploits3References11

BDU FSTEC•added 2026/07/30 12:00 a.m.•14 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain full control over the application through the HTTP network protocol...

9CVSS7.2AI score0.00432EPSS