oracle weblogic server

Name: oracle weblogic server
Brand: oracle

productUS

cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

62critical75high125medium5low

updated 2026-10-27

vulnerabilities (359)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-5638US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2017-03-11	4 versions
CVE-2020-14882US	high10.0OT critical	100.0% (100th)	KEV	no fix	2020-10-21	5 versions
CVE-2017-10271US	high7.5OT critical	100.0% (100th)	KEV	no fix	2017-10-19	4 versions
CVE-2019-2725US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-04-26	2 versions
CVE-2018-2628US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2018-04-19	4 versions
CVE-2023-21839US	—OT critical	99.9% (100th)	KEV	no fix	2023-01-18	3 versions
CVE-2022-22965US	critical9.8OT critical	99.6% (100th)	KEV	no fix	2022-04-01	3 versions
CVE-2020-14750US	high7.5OT critical	99.2% (100th)	KEV	no fix	2020-11-02	5 versions
CVE-2020-14883US	high9.0OT critical	97.7% (100th)	KEV	no fix	2020-10-21	5 versions
CVE-2017-3506US	high7.4OT critical	96.0% (100th)	KEV	no fix	2017-04-24	5 versions
CVE-2015-4852US	critical9.8OT critical	95.0% (100th)	KEV	no fix	2015-11-18	4 versions
CVE-2020-2883US	critical9.8OT critical	94.6% (100th)	KEV	no fix	2020-04-15	4 versions
CVE-2020-14644US	critical9.8OT critical	94.5% (100th)	KEV	no fix	2020-07-15	3 versions
CVE-2020-2551US	critical9.8OT critical	92.8% (100th)	KEV	no fix	2020-01-15	4 versions
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	no fix	2020-04-29	4 versions
CVE-2024-21182US	—OT critical	74.2% (99th)	KEV	no fix	2024-07-16	2 versions
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	3 versions
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	5 versions
CVE-2021-44832US	medium6.6	97.9% (100th)	Exploit	no fix	2021-12-28	3 versions
CVE-2017-3248US	critical9.8	97.3% (100th)	Exploit	no fix	2017-01-27	4 versions
CVE-2018-3245US	critical9.8	94.3% (100th)	Exploit	no fix	2018-10-17	3 versions
CVE-2022-21371US	medium5.0	92.6% (100th)	Exploit	no fix	2022-01-19	4 versions
CVE-2016-3510US	critical9.8	91.4% (100th)	Exploit	no fix	2016-07-21	3 versions
CVE-2017-5645US	critical9.8	89.4% (100th)	Exploit	no fix	2017-04-17	5 versions
CVE-2019-2729US	critical9.8	88.8% (100th)	Exploit	no fix	2019-06-19	3 versions
CVE-2020-5398US	high7.5OT high	88.3% (100th)	Exploit	no fix	2020-01-17	2 versions
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	5 versions
CVE-2008-3257US	high10.0	83.6% (100th)	Exploit	no fix	2008-07-22	≤ 10.3
CVE-2023-21931US	—OT elevated	82.4% (100th)	Exploit	no fix	2023-04-18	3 versions
CVE-2021-4104US	high7.5	80.6% (100th)	Exploit	no fix	2021-12-14	3 versions
CVE-2021-2394US	high10.0	76.4% (100th)	Exploit	no fix	2021-07-21	5 versions
CVE-2021-2109US	medium6.5	70.4% (99th)	Exploit	no fix	2021-01-20	5 versions
CVE-2018-2893US	critical9.8	70.3% (99th)	Exploit	no fix	2018-07-18	4 versions
CVE-2019-17571US	critical9.8	70.0% (99th)	Exploit	no fix	2019-12-20	5 versions
CVE-2022-23305US	critical9.8	66.5% (99th)	Exploit	no fix	2022-01-18	3 versions
CVE-2018-3191US	critical9.8	62.9% (99th)	Exploit	no fix	2018-10-17	3 versions
CVE-2016-0638US	critical9.8	62.9% (99th)	Exploit	no fix	2016-04-21	4 versions
CVE-2024-20931US	—	59.7% (99th)	Exploit	no fix	2024-02-17	2 versions
CVE-2018-2894US	critical9.8	50.2% (99th)	Exploit	no fix	2018-07-18	4 versions
CVE-2020-14645US	critical9.8	46.9% (99th)	Exploit	no fix	2020-07-15	5 versions
CVE-2021-41184US	medium6.1	40.8% (99th)	Exploit	no fix	2021-10-26	3 versions
CVE-2016-8610US	high7.5	39.7% (99th)	Exploit	no fix	2017-11-13	4 versions
CVE-2021-41182US	medium6.1	39.4% (99th)	Exploit	no fix	2021-10-26	3 versions
CVE-2019-2890US	high7.2	36.8% (98th)	Exploit	no fix	2019-10-16	3 versions
CVE-2019-2618US	medium5.5	32.9% (98th)	Exploit	no fix	2019-04-23	3 versions
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	no fix	2018-01-18	2 versions
CVE-2018-3252US	critical9.8	29.5% (98th)	Exploit	no fix	2018-10-17	3 versions
CVE-2020-9548US	critical9.8	18.9% (97th)	Exploit	no fix	2020-03-02	2 versions
CVE-2020-9547US	critical9.8	18.4% (97th)	Exploit	no fix	2020-03-02	2 versions
CVE-2021-3450US	high7.4	18.3% (97th)	Exploit	no fix	2021-03-25	2 versions

showing 50 of 359

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation113 CVEs
CWE-284Improper Access Control57 CVEs
CWE-306Missing Authentication for Critical Function42 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor39 CVEs
CWE-502Deserialization of Untrusted Data37 CVEs
CWE-264CWE-26432 CVEs
CWE-400Uncontrolled Resource Consumption15 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE359 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan