Oracle Corporation WebLogic Server

Name: Oracle Corporation WebLogic Server
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

25critical40high78medium2low

updated 2026-10-27

vulnerabilities (190)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-14882US	high10.0OT critical	100.0% (100th)	KEV	no fix	2020-10-21	5 versions
CVE-2017-10271US	high7.5OT critical	100.0% (100th)	KEV	no fix	2017-10-19	4 versions
CVE-2018-2628US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2018-04-19	4 versions
CVE-2023-21839US	—OT critical	99.9% (100th)	KEV	no fix	2023-01-18	3 versions
CVE-2020-14750US	high7.5OT critical	99.2% (100th)	KEV	no fix	2020-11-02	5 versions
CVE-2020-14883US	high9.0OT critical	97.7% (100th)	KEV	no fix	2020-10-21	5 versions
CVE-2017-3506US	high7.4OT critical	96.0% (100th)	KEV	no fix	2017-04-24	5 versions
CVE-2020-2883US	critical9.8OT critical	94.6% (100th)	KEV	no fix	2020-04-15	4 versions
CVE-2020-14644US	critical9.8OT critical	94.5% (100th)	KEV	no fix	2020-07-15	3 versions
CVE-2020-2551US	critical9.8OT critical	92.8% (100th)	KEV	no fix	2020-01-15	4 versions
CVE-2024-21182US	—OT critical	74.2% (99th)	KEV	no fix	2024-07-16	2 versions
CVE-2018-3245US	critical9.8	94.3% (100th)	Exploit	no fix	2018-10-17	3 versions
CVE-2022-21371US	medium5.0	92.6% (100th)	Exploit	no fix	2022-01-19	4 versions
CVE-2019-2729US	critical9.8	88.8% (100th)	Exploit	no fix	2019-06-19	3 versions
CVE-2023-21931US	—OT elevated	82.4% (100th)	Exploit	no fix	2023-04-18	3 versions
CVE-2021-2394US	high10.0	76.4% (100th)	Exploit	no fix	2021-07-21	5 versions
CVE-2021-2109US	medium6.5	70.4% (99th)	Exploit	no fix	2021-01-20	5 versions
CVE-2018-2893US	critical9.8	70.3% (99th)	Exploit	no fix	2018-07-18	4 versions
CVE-2018-3191US	critical9.8	62.9% (99th)	Exploit	no fix	2018-10-17	3 versions
CVE-2024-20931US	—	59.7% (99th)	Exploit	no fix	2024-02-17	2 versions
CVE-2018-2894US	critical9.8	50.2% (99th)	Exploit	no fix	2018-07-18	3 versions
CVE-2020-14645US	critical9.8	46.9% (99th)	Exploit	no fix	2020-07-15	5 versions
CVE-2019-2890US	high7.2	36.8% (98th)	Exploit	no fix	2019-10-16	3 versions
CVE-2019-2618US	medium5.5	32.9% (98th)	Exploit	no fix	2019-04-23	3 versions
CVE-2018-3252US	critical9.8	29.5% (98th)	Exploit	no fix	2018-10-17	3 versions
CVE-2024-21006US	—OT elevated	7.85% (95th)	Exploit	no fix	2024-04-16	2 versions
CVE-2017-10352US	critical9.9	6.25% (94th)	Exploit	no fix	2017-10-19	5 versions
CVE-2019-2615US	medium4.9	6.00% (93rd)	Exploit	no fix	2019-04-23	3 versions
CVE-2021-1994US	high7.5	5.47% (93rd)	Exploit	no fix	2021-01-20	2 versions
CVE-2019-2888US	medium5.3	5.34% (93rd)	Exploit	no fix	2019-10-16	3 versions
CVE-2020-2546US	critical9.8	5.13% (92nd)	Exploit	no fix	2020-01-15	2 versions
CVE-2022-21306US	high7.5	4.14% (91st)	Exploit	no fix	2022-01-19	4 versions
CVE-2022-21350US	medium6.4	3.62% (89th)	Exploit	no fix	2022-01-19	4 versions
CVE-2023-21837US	—OT elevated	0.95% (61st)	Exploit	no fix	2023-01-18	3 versions
CVE-2020-14841US	high7.5	52.0% (99th)	—	no fix	2020-10-21	5 versions
CVE-2019-2650US	high7.5	39.3% (99th)	—	no fix	2019-04-23	3 versions
CVE-2019-2649US	high7.5	36.8% (98th)	—	no fix	2019-04-23	3 versions
CVE-2020-14825US	high7.5	30.4% (98th)	—	no fix	2020-10-21	3 versions
CVE-2020-14625US	critical9.8	9.89% (96th)	—	no fix	2020-07-15	3 versions
CVE-2021-2135US	high7.5	8.44% (95th)	—	no fix	2021-04-22	3 versions
CVE-2020-2798US	high7.2	7.70% (95th)	—	no fix	2020-04-15	4 versions
CVE-2020-14820US	medium5.0	4.50% (91st)	—	no fix	2020-10-21	5 versions
CVE-2018-3213US	high7.5	4.36% (91st)	—	Docker 12.2.1.3.20180913	2018-10-17	unspecified → Docker 12.2.1.3.20180913
CVE-2017-10147US	high8.6	4.21% (91st)	—	no fix	2017-08-08	4 versions
CVE-2021-2075US	high7.5	3.80% (90th)	—	no fix	2021-01-20	5 versions
CVE-2021-2047US	high7.5	3.80% (90th)	—	no fix	2021-01-20	3 versions
CVE-2020-14859US	high10.0	3.80% (90th)	—	no fix	2020-10-21	5 versions
CVE-2017-10137US	critical10.0	3.79% (90th)	—	no fix	2017-08-08	2 versions
CVE-2021-2108US	high7.5	3.73% (90th)	—	no fix	2021-01-20	≤ 12.1.3.0.0
CVE-2021-2064US	high7.5	3.73% (90th)	—	no fix	2021-01-20	≤ 12.1.3.0.0

showing 50 of 190

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation83 CVEs
CWE-284Improper Access Control42 CVEs
CWE-264CWE-26432 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor16 CVEs
CWE-306Missing Authentication for Critical Function16 CVEs
CWE-400Uncontrolled Resource Consumption8 CVEs
CWE-266Incorrect Privilege Assignment7 CVEs
CWE-502Deserialization of Untrusted Data6 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)190 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan