Known vulnerabilities in Oracle WebLogic Server 12.2.1.4.0 - page 6

Vendor: Oracle
Software: Oracle WebLogic Server
Version: 12.2.1.4.0
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 211
Public exploits: 28
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle WebLogic Server version 12.2.1.4.0 Oracle WebLogic Server 12.2.1.4.0 is affected by 211 vulnerabilities: 2 critical, 47 high, 140 medium, 22 low Critical High Medium Low

Vulnerabilities (211)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65488 - Improper input validation
CVE-2022-21548		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072038
SB2022100348
SB2022081555
#VU65490 - Improper input validation
CVE-2022-21557		 CWE-20 Low
No
No
 - 20.07.2022 SB2022072038
SB2022100348
SB2022081555
#VU65486 - Improper input validation
CVE-2022-24839		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU65469 - Improper input validation
CVE-2022-29577		 CWE-20 Medium
No
No
 - 19.07.2022 SB2022071969
SB2022072038
SB20221018125
and 10 more
#VU63479 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-23457		 CWE-22 High
No
No
 - 20.05.2022 SB2022052008
SB2022052009
SB2022052010
and 11 more
#VU62525 - Improper input validation
CVE-2022-21441		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042289
SB2022051249
#VU62529 - Out-of-bounds read
CVE-2022-21453		 CWE-125 Medium
No
No
 - 22.04.2022 SB2022042289
#VU62492 - Origin Validation Error
CVE-2021-26291		 CWE-346 High
No
No
 - 22.04.2022 SB2021042333
SB2022042228
SB2022072038
and 15 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Public exploit available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU60986 - Improper input validation
CVE-2020-28491		 CWE-20 Medium
No
No
 - 03.03.2022 SB2022030316
SB2022030322
SB2022062413
and 12 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 - 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU59716 - Improper input validation
CVE-2022-21386		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59717 - Improper input validation
CVE-2019-10219		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
SB2022070611
SB2022083134
and 4 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Public exploit available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU52501 - Server-Side Request Forgery (SSRF)
CVE-2020-11987		 CWE-918 Medium
No
No
 - 23.04.2021 SB2021042315
SB2021042316
SB2021042514
and 32 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 - 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more


Showing elements 101 - 120 out of 211