Known vulnerabilities in Oracle WebLogic Server 12.1.3.0.0

Vendor: Oracle
Software: Oracle WebLogic Server
Version: 12.1.3.0.0
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 92
Public exploits: 20
Known exploited (KEV): 11

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle WebLogic Server version 12.1.3.0.0 Oracle WebLogic Server 12.1.3.0.0 is affected by 92 vulnerabilities: 2 critical, 30 high, 40 medium, 20 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59716 - Improper input validation
CVE-2022-21386		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59700 - Improper input validation
CVE-2022-21306		 CWE-20 High
No
No
 - 18.01.2022 SB2022011837
#VU59704 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-21371		 CWE-22 Medium
Public exploit available
No
 - 18.01.2022 SB2022011837
#VU59706 - Improper input validation
CVE-2022-21347		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59707 - Improper input validation
CVE-2022-21350		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU57470 - Improper input validation
CVE-2021-35617		 CWE-20 High
No
No
 - 19.10.2021 SB2021101936
SB2021111518
#VU57481 - Improper input validation
CVE-2021-35620		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101936
SB2021111518
#VU55365 - Improper input validation
CVE-2021-2403		 CWE-20 Medium
No
No
 - 27.07.2021 SB2021072746
SB2021080540
#VU55351 - Improper input validation
CVE-2021-2378		 CWE-20 Medium
No
No
 - 27.07.2021 SB2021072746
SB2021080540
#VU55352 - Improper input validation
CVE-2021-2376		 CWE-20 Medium
No
No
 - 27.07.2021 SB2021072746
SB2021080540
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 122 more
#VU27250 - Improper input validation
CVE-2015-0254		 CWE-20 Medium
No
No
 - 23.04.2020 SB2020042337
SB2015092202
SB2017062712
and 7 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Public exploit available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU26918 - Improper input validation
CVE-2020-2934		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020041904
SB2020061502
SB2021052616
and 6 more
#VU109736 - Improper input validation
CVE-2019-2824		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071657
#VU109737 - Improper input validation
CVE-2019-2827		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071657
#VU15467 - Improper input validation
CVE-2018-15756		 CWE-20 Low
No
No
 - 22.10.2018 SB2018102305
SB2020012203
SB2020032701
and 29 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 - 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more
#VU11301 - Improper Access Control
CVE-2018-8088		 CWE-284 Low
No
No
 - 28.03.2018 SB2018022112
SB2018032813
SB2018032817
and 27 more
#VU7277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7103		 CWE-79 Low
No
No
 - 10.12.2016 SB2016072302
SB2017011903
SB2016120801
and 19 more


Showing elements 1 - 20 out of 92