Known vulnerabilities in Oracle WebLogic Server 12.1.3.0.0 - page 4

Vendor: Oracle
Software: Oracle WebLogic Server
Version: 12.1.3.0.0
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 92
Public exploits: 20
Known exploited (KEV): 11

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle WebLogic Server version 12.1.3.0.0 Oracle WebLogic Server 12.1.3.0.0 is affected by 92 vulnerabilities: 2 critical, 30 high, 40 medium, 20 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30029 - Improper input validation
CVE-2020-14645		 CWE-20 High
Public exploit available
No
 - 16.07.2020 SB2020071683
#VU28676 - Improper input validation
CVE-2019-2888		 CWE-20 Medium
No
No
 - 05.06.2020 SB2019101557
#VU28678 - Improper input validation
CVE-2019-2887		 CWE-20 Low
No
No
 - 05.06.2020 SB2019101557
#VU28661 - Improper input validation
CVE-2019-2891		 CWE-20 High
No
No
 - 05.06.2020 SB2019101557
#VU28670 - Improper input validation
CVE-2019-2890		 CWE-20 Medium
Public exploit available
No
 - 05.06.2020 SB2019101557
#VU28421 - Improper input validation
CVE-2020-2801		 CWE-20 High
No
No
 - 01.06.2020 SB2020041481
#VU28422 - Improper input validation
CVE-2020-2884		 CWE-20 High
No
No
 - 01.06.2020 SB2020041481
#VU28423 - Improper input validation
CVE-2020-2867		 CWE-20 High
No
No
 - 01.06.2020 SB2020041481
#VU28430 - Improper input validation
CVE-2020-2798		 CWE-20 Medium
No
No
 - 01.06.2020 SB2020041481
#VU28432 - Improper input validation
CVE-2020-2811		 CWE-20 Medium
No
No
 - 01.06.2020 SB2020041481
#VU28436 - Improper input validation
CVE-2020-2766		 CWE-20 Medium
No
No
 - 01.06.2020 SB2020041481
#VU28440 - Improper input validation
CVE-2020-2869		 CWE-20 Low
No
No
 - 01.06.2020 SB2020041481
#VU27477 - Deserialization of Untrusted Data
CVE-2020-2883		 CWE-502 High
Public exploit available
Exploited
 - 01.05.2020 SB2020050105
SB2020041481
#VU21465 - Out-of-bounds read
CVE-2018-11058		 CWE-125 Medium
No
No
 - 01.10.2019 SB2018091402
SB2020012202
SB2020011462
and 12 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Public exploit available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 - 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU13906 - Permissions, Privileges, and Access Controls
CVE-2018-2894		 CWE-264 Low
Public exploit available
No
 - 17.07.2018 SB2018071719
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645		 CWE-502 High
No
No
 - 24.04.2018 SB2017040201
SB2019011707
SB2017090512
and 40 more
#VU9816 - Deserialization of Untrusted Data
CVE-2017-3506		 CWE-502 Critical
Public exploit available
Exploited
 - 28.12.2017 SB2017042406
#VU9815 - Improper Access Control
CVE-2017-10271		 CWE-284 Low
Public exploit available
Exploited
 - 28.12.2017 SB2017101943


Showing elements 61 - 80 out of 92