Oracle Corp. WebLogic Server

Name: Oracle Corp. WebLogic Server
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

39critical56high92medium3low

updated 2026-10-27

vulnerabilities (236)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-14882US	high10.0OT critical	100.0% (100th)	KEV	no fix	2020-10-21	5 versions
CVE-2017-10271US	high7.5OT critical	100.0% (100th)	KEV	no fix	2017-10-19	4 versions
CVE-2019-2725US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-04-26	2 versions
CVE-2018-2628US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2018-04-19	4 versions
CVE-2023-21839US	—OT critical	99.9% (100th)	KEV	no fix	2023-01-18	3 versions
CVE-2020-14750US	high7.5OT critical	99.2% (100th)	KEV	no fix	2020-11-02	5 versions
CVE-2020-14883US	high9.0OT critical	97.7% (100th)	KEV	no fix	2020-10-21	5 versions
CVE-2015-4852US	critical9.8OT critical	95.0% (100th)	KEV	no fix	2015-11-18	4 versions
CVE-2020-2883US	critical9.8OT critical	94.6% (100th)	KEV	no fix	2020-04-15	4 versions
CVE-2020-14644US	critical9.8OT critical	94.5% (100th)	KEV	no fix	2020-07-15	5 versions
CVE-2020-2551US	critical9.8OT critical	92.8% (100th)	KEV	no fix	2020-01-15	4 versions
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	no fix	2020-04-29	4 versions
CVE-2024-21182US	—OT critical	74.2% (99th)	KEV	no fix	2024-07-16	2 versions
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	5 versions
CVE-2014-0114US	high7.5	99.0% (100th)	Exploit	no fix	2014-04-30	5 versions
CVE-2018-3245US	critical9.8	94.3% (100th)	Exploit	no fix	2018-10-17	3 versions
CVE-2022-21371US	medium5.0	92.6% (100th)	Exploit	no fix	2022-01-19	4 versions
CVE-2017-5645US	critical9.8	89.4% (100th)	Exploit	no fix	2017-04-17	9 versions
CVE-2019-2729US	critical9.8	88.8% (100th)	Exploit	no fix	2019-06-19	3 versions
CVE-2020-5398US	high7.5OT high	88.3% (100th)	Exploit	no fix	2020-01-17	2 versions
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	3 versions
CVE-2023-21931US	—OT elevated	82.4% (100th)	Exploit	no fix	2023-04-18	3 versions
CVE-2021-2394US	high10.0	76.4% (100th)	Exploit	no fix	2021-07-21	5 versions
CVE-2021-2109US	medium6.5	70.4% (99th)	Exploit	no fix	2021-01-20	5 versions
CVE-2018-2893US	critical9.8	70.3% (99th)	Exploit	no fix	2018-07-18	4 versions
CVE-2019-17571US	critical9.8	70.0% (99th)	Exploit	no fix	2019-12-20	7 versions
CVE-2022-23305US	critical9.8	66.5% (99th)	Exploit	no fix	2022-01-18	3 versions
CVE-2018-3191US	critical9.8	62.9% (99th)	Exploit	no fix	2018-10-17	3 versions
CVE-2016-0638US	critical9.8	62.9% (99th)	Exploit	no fix	2016-04-21	4 versions
CVE-2024-20931US	—	59.7% (99th)	Exploit	no fix	2024-02-17	2 versions
CVE-2018-2894US	critical9.8	50.2% (99th)	Exploit	no fix	2018-07-18	4 versions
CVE-2020-14645US	critical9.8	46.9% (99th)	Exploit	no fix	2020-07-15	5 versions
CVE-2021-41184US	medium6.1	40.8% (99th)	Exploit	no fix	2021-10-26	3 versions
CVE-2014-4210US	medium5.0	38.2% (99th)	Exploit	no fix	2014-07-17	2 versions
CVE-2019-2618US	medium5.5	32.9% (98th)	Exploit	no fix	2019-04-23	3 versions
CVE-2018-3252US	critical9.8	29.5% (98th)	Exploit	no fix	2018-10-17	3 versions
CVE-2020-9548US	critical9.8	18.9% (97th)	Exploit	no fix	2020-03-02	2 versions
CVE-2020-9547US	critical9.8	18.4% (97th)	Exploit	no fix	2020-03-02	2 versions
CVE-2019-17195US	critical9.8	11.1% (96th)	Exploit	no fix	2019-10-15	2 versions
CVE-2020-6950US	medium6.5	10.1% (96th)	Exploit	no fix	2021-06-02	2 versions
CVE-2020-9488US	low3.7	8.22% (95th)	Exploit	no fix	2020-04-27	5 versions
CVE-2020-10673US	high8.8	8.03% (95th)	Exploit	no fix	2020-03-18	2 versions
CVE-2024-21006US	—OT elevated	7.85% (95th)	Exploit	no fix	2024-04-16	2 versions
CVE-2020-11113US	high8.8	6.28% (94th)	Exploit	no fix	2020-03-31	2 versions
CVE-2019-2615US	medium4.9	6.00% (93rd)	Exploit	no fix	2019-04-23	3 versions
CVE-2021-1994US	high7.5	5.47% (93rd)	Exploit	no fix	2021-01-20	2 versions
CVE-2020-2546US	critical9.8	5.13% (92nd)	Exploit	no fix	2020-01-15	2 versions
CVE-2005-1380US	medium6.8	4.97% (92nd)	Exploit	no fix	2005-05-03	10 versions
CVE-2018-1313US	medium5.3	4.59% (92nd)	Exploit	no fix	2018-05-07	≤ 12.2.1.3
CVE-2022-21306US	high7.5	4.14% (91st)	Exploit	no fix	2022-01-19	4 versions

showing 50 of 236

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation93 CVEs
CWE-284Improper Access Control36 CVEs
CWE-264CWE-26431 CVEs
CWE-502Deserialization of Untrusted Data25 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor15 CVEs
CWE-306Missing Authentication for Critical Function14 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13 CVEs
CWE-400Uncontrolled Resource Consumption11 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)236 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan