Known vulnerabilities in Oracle WebLogic Server 12.2.1.4.0 - page 2

Vendor: Oracle
Software: Oracle WebLogic Server
Version: 12.2.1.4.0
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 211
Public exploits: 28
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle WebLogic Server version 12.2.1.4.0 Oracle WebLogic Server 12.2.1.4.0 is affected by 211 vulnerabilities: 2 critical, 47 high, 140 medium, 22 low Critical High Medium Low

Vulnerabilities (211)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU103148 - Improper input validation
CVE-2025-21535		 CWE-20 High
No
No
 - 21.01.2025 SB2025012238
SB2025051252
#VU103149 - Improper input validation
CVE-2023-7272		 CWE-20 High
No
No
 - 21.01.2025 SB2025012230
SB2025012238
SB2025071038
and 1 more
#VU98627 - Improper input validation
CVE-2024-21216		 CWE-20 High
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98633 - Improper input validation
CVE-2024-21274		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
#VU98634 - Improper input validation
CVE-2024-21215		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98635 - Improper input validation
CVE-2024-21234		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98636 - Improper input validation
CVE-2024-21260		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 133 more
#VU94548 - Improper input validation
CVE-2024-21181		 CWE-20 High
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU94549 - Improper input validation
CVE-2024-21175		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU94550 - Improper input validation
CVE-2024-21182		 CWE-20 Medium
Public exploit available
Exploited
 - 18.07.2024 SB20240718113
SB2025051251
#VU94551 - Improper input validation
CVE-2024-21183		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 - 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 - 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88638 - Improper input validation
CVE-2024-21007		 CWE-20 Medium
No
No
 - 17.04.2024 SB2024041739
SB2024051469
#VU86736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23635		 CWE-79 Low
No
No
 - 22.02.2024 SB2024022233
SB2024041739
SB2024041754
and 6 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 - 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more


Showing elements 21 - 40 out of 211