Known vulnerabilities in Oracle WebLogic Server

Vendor: Oracle
Software: Oracle WebLogic Server
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 286
Public exploits: 38
Known exploited (KEV): 17

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle WebLogic Server Oracle WebLogic Server is affected by 286 known vulnerabilities: 4 critical, 74 high, 167 medium, 41 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149572 - Improper input validation
CVE-2026-35301		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149573 - Improper input validation
CVE-2026-35292		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149598 - Improper input validation
CVE-2026-35263		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149617 - Improper input validation
CVE-2026-35300		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149629 - Improper input validation
CVE-2026-35298		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149640 - Improper input validation
CVE-2026-35299		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149641 - Improper input validation
CVE-2026-35303		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149642 - Improper input validation
CVE-2026-35311		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149643 - Improper input validation
CVE-2026-35259		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149646 - Improper input validation
CVE-2026-35258		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149650 - Improper input validation
CVE-2026-35302		 CWE-20 High
No
No
 - 14.09.2026 SB2026091465
#VU149654 - Improper input validation
CVE-2026-46848		 CWE-20 Low
No
No
 - 14.09.2026 SB2026091465
#VU149662 - Improper input validation
CVE-2026-35291		 CWE-20 Medium
No
No
 - 14.09.2026 SB2026091465
#VU126742 - Improper input validation
CVE-2026-34305		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422134
#VU126743 - Improper input validation
CVE-2026-34292		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422134
#VU126744 - Improper input validation
CVE-2026-34315		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422134
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 102 more
#VU118675 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-35036		 CWE-94 High
No
No
 - 21.11.2025 SB2025112119
SB2025112459
SB20260422134
and 1 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916		 CWE-770 Medium
No
No
 - 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 36 more
#VU108843 - Resource exhaustion
CVE-2025-46392		 CWE-400 Medium
No
No
 - 09.05.2025 SB2025050949
SB2025081124
SB2025091517
and 7 more


Showing elements 1 - 20 out of 286