oracle weblogic server proxy plug-in
productUScpe:2.3:a:oracle:weblogic_server_proxy_plug-in:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
8critical4high1medium0low
updated 2026-10-28
01
vulnerabilities (16)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-21962US | —OT critical | KEV |
| CVE-2020-5360US | high7.5 | — |
| CVE-2020-5359US | medium5.8 | — |
| CVE-2020-29508US | critical9.8 | — |
| CVE-2020-29506US | critical9.8 | — |
| CVE-2020-26185US | high7.5 | — |
| CVE-2020-29507US | critical9.8 | — |
| CVE-2020-35163US | critical9.8OT elevated | — |
| CVE-2020-35167US | critical9.8 | — |
| CVE-2020-35169US | critical9.8 | — |
| CVE-2020-35164US | high8.1 | — |
| CVE-2020-35166US | critical9.8 | — |
| CVE-2020-26184US | high7.5 | — |
| CVE-2026-60364US | — | — |
| CVE-2020-35168US | critical9.8OT elevated | — |
| CVE-2026-60365US | —OT elevated | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-20Improper Input Validation4 CVEs
- CWE-385Covert Timing Channel3 CVEs
- CWE-125Out-of-bounds Read2 CVEs
- CWE-284Improper Access Control2 CVEs
- CWE-127Buffer Under-read1 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-252Unchecked Return Value1 CVEs
- CWE-287Improper Authentication1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE16 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan