Weblogic Server Security Vulnerabilities and Issues — Page 6 of Weblogic Server CVE List

Lucene search

OracleWeblogic Server

309 matches found

CVE•added 2020/01/15 5:15 p.m.•56 views

CVE-2020-2549

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server....

7.2CVSS7.5AI score0.0164EPSS

CVE•added 2018/07/18 1:29 p.m.•55 views

CVE-2018-2998

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: SAML). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

5.5CVSS5.1AI score0.00208EPSS

CVE•added 2019/01/16 7:30 p.m.•55 views

CVE-2019-2452

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis...

6.7CVSS6.9AI score0.00498EPSS

CVE•added 2019/04/23 7:32 p.m.•55 views

CVE-2019-2658

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

9.8CVSS9AI score0.02024EPSS

CVE•added 2020/07/15 6:15 p.m.•55 views

CVE-2020-2967

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

7.5CVSS7.4AI score0.0467EPSS

CVE•added 2016/07/21 10:12 a.m.•54 views

CVE-2016-3445

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488.

5.3CVSS5.5AI score0.01548EPSS

CVE•added 2019/10/16 6:15 p.m.•54 views

CVE-2019-2889

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Success...

6.1CVSS5.8AI score0.01163EPSS

CVE•added 2020/01/15 5:15 p.m.•54 views

CVE-2020-2548

4.9CVSS4.9AI score0.00306EPSS

CVE•added 2017/08/08 3:29 p.m.•53 views

CVE-2017-10148

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compr...

5.8CVSS5.8AI score0.02253EPSS

CVE•added 2017/08/08 3:29 p.m.•52 views

CVE-2017-10063

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to comp...

5.8CVSS5.2AI score0.00959EPSS

CVE•added 2020/01/15 5:15 p.m.•52 views

CVE-2020-2552

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle We...

4.9CVSS4.8AI score0.0041EPSS

CVE•added 2020/04/15 2:15 p.m.•52 views

CVE-2020-2829

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Management Services). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server....

4.9CVSS4.9AI score0.00767EPSS

CVE•added 2019/01/16 7:30 p.m.•51 views

CVE-2019-2395

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

5.5CVSS5.3AI score0.00292EPSS

CVE•added 2019/04/23 7:32 p.m.•51 views

CVE-2019-2645

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compr...

9.8CVSS9AI score0.02024EPSS

CVE•added 2020/07/15 6:15 p.m.•51 views

CVE-2020-14557

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to ...

6.8CVSS6.8AI score0.01871EPSS

CVE•added 2020/07/15 6:15 p.m.•51 views

CVE-2020-14589

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

7.5CVSS7.4AI score0.03213EPSS

CVE•added 2023/04/18 8:15 p.m.•51 views

CVE-2023-21964

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogi...

7.5CVSS7.1AI score0.00507EPSS

CVE•added 2018/10/17 1:31 a.m.•50 views

CVE-2018-3248

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

6.5CVSS6.5AI score0.018EPSS

CVE•added 2020/04/15 2:15 p.m.•50 views

CVE-2020-2828

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server...

7.5CVSS7.2AI score0.02794EPSS

CVE•added 2020/04/15 2:15 p.m.•50 views

CVE-2020-2869

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

4.3CVSS3.7AI score0.0122EPSS

CVE•added 2016/07/21 10:12 a.m.•49 views

CVE-2016-3499

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.

10CVSS8.5AI score0.05246EPSS

CVE•added 2024/10/15 8:15 p.m.•49 views

CVE-2024-21274

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

7.5CVSS7.2AI score0.00051EPSS

CVE•added 2011/01/19 5:0 p.m.•48 views

CVE-2010-4453

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.

4.3CVSS5.9AI score0.00483EPSS

CVE•added 2016/07/21 10:14 a.m.•48 views

CVE-2016-3586

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3510.

10CVSS8.5AI score0.93335EPSS

CVE•added 2019/01/16 7:30 p.m.•48 views

CVE-2019-2441

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE). The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle We...

5.3CVSS4.9AI score0.01003EPSS

CVE•added 2019/04/23 7:32 p.m.•48 views

CVE-2019-2650

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comp...

7.5CVSS7.4AI score0.13754EPSS

CVE•added 2018/10/17 1:31 a.m.•47 views

CVE-2018-3201

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

9.8CVSS9.1AI score0.02422EPSS

CVE•added 2020/07/15 6:15 p.m.•47 views

CVE-2020-14572

6.1CVSS5.9AI score0.00879EPSS

CVE•added 2020/04/15 2:15 p.m.•46 views

CVE-2020-2766

5.3CVSS4.6AI score0.01434EPSS

CVE•added 2020/04/15 2:15 p.m.•46 views

CVE-2020-2811

6.1CVSS5.7AI score0.01121EPSS

CVE•added 2024/10/15 8:15 p.m.•46 views

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Serv...

7.5CVSS7.2AI score0.00461EPSS

CVE•added 2025/01/21 9:15 p.m.•46 views

CVE-2025-21549

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Oracle WebLogic Server. Successful a...

7.5CVSS6.9AI score0.00094EPSS

CVE•added 2016/10/25 2:29 p.m.•45 views

CVE-2016-3505

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces.

9CVSS7.7AI score0.01986EPSS

CVE•added 2018/07/18 1:29 p.m.•45 views

CVE-2018-2987

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

6.1CVSS5.9AI score0.00458EPSS

CVE•added 2018/10/17 1:31 a.m.•45 views

CVE-2018-3250

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

6.1CVSS6AI score0.00654EPSS

CVE•added 2019/01/16 7:30 p.m.•45 views

CVE-2019-2418

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3 to compromis...

6.8CVSS6.7AI score0.00659EPSS

CVE•added 2020/07/15 6:15 p.m.•45 views

CVE-2020-14652

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.5CVSS6AI score0.00631EPSS

CVE•added 2020/07/15 6:15 p.m.•45 views

CVE-2020-2966

5.8CVSS5.2AI score0.00601EPSS

CVE•added 2023/04/18 8:15 p.m.•45 views

CVE-2023-21956

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic...

6.1CVSS5.8AI score0.0033EPSS

CVE•added 2024/10/15 8:15 p.m.•45 views

CVE-2024-21260

7.5CVSS7.1AI score0.00056EPSS

CVE•added 2008/07/15 11:41 p.m.•44 views

CVE-2008-2578

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors.

4.3CVSS5.8AI score0.00185EPSS

CVE•added 2016/10/25 2:29 p.m.•44 views

CVE-2016-3551

Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXWS Web Services Stack.

10CVSS8.3AI score0.04003EPSS

CVE•added 2018/01/18 2:29 a.m.•44 views

CVE-2018-2625

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

5.3CVSS4.8AI score0.00689EPSS

CVE•added 2016/10/25 2:29 p.m.•43 views

CVE-2016-5488

5.3CVSS4.9AI score0.01548EPSS

CVE•added 2016/10/25 2:31 p.m.•43 views

CVE-2016-5601

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentiality and integrity via vectors related to CIE Related Components.

6.3CVSS5.3AI score0.00155EPSS

CVE•added 2020/07/15 6:15 p.m.•43 views

CVE-2020-14622

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

4.9CVSS4.7AI score0.00732EPSS

CVE•added 2020/04/15 2:15 p.m.•43 views

CVE-2020-2867

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Ora...

8.2CVSS7.4AI score0.01305EPSS

CVE•added 2008/07/15 11:41 p.m.•41 views

CVE-2008-2576

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors.

4.4CVSS5.8AI score0.00143EPSS

CVE•added 2008/07/15 11:41 p.m.•40 views

CVE-2008-2577

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors.

4.6CVSS5.7AI score0.00901EPSS

CVE•added 2020/07/15 6:15 p.m.•36 views

CVE-2020-14639

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comp...

7.5CVSS7.4AI score0.05244EPSS

Total number of security vulnerabilities309