Known vulnerabilities in Oracle WebLogic Server 12.2.1.4.0 - page 7

Vendor: Oracle
Software: Oracle WebLogic Server
Version: 12.2.1.4.0
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 263
Public exploits: 28
Known exploited (KEV): 10

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle WebLogic Server version 12.2.1.4.0 Oracle WebLogic Server 12.2.1.4.0 is affected by 263 vulnerabilities: 2 critical, 90 high, 149 medium, 22 low Critical High Medium Low

Vulnerabilities (263)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63479 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-23457		 CWE-22 High
No
No
 - 20.05.2022 SB2022052008
SB2022052009
SB2022052010
and 11 more
#VU62525 - Improper input validation
CVE-2022-21441		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042289
SB2022051249
#VU62529 - Out-of-bounds read
CVE-2022-21453		 CWE-125 Medium
No
No
 - 22.04.2022 SB2022042289
#VU59712 - Improper input validation
CVE-2022-21259		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59713 - Improper input validation
CVE-2022-21260		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59714 - Improper input validation
CVE-2022-21261		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59715 - Improper input validation
CVE-2022-21262		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59716 - Improper input validation
CVE-2022-21386		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59717 - Improper input validation
CVE-2019-10219		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
SB2022070611
SB2022083134
and 4 more
#VU59705 - Improper input validation
CVE-2022-21252		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59706 - Improper input validation
CVE-2022-21347		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59707 - Improper input validation
CVE-2022-21350		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59708 - Improper input validation
CVE-2022-21353		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59709 - Improper input validation
CVE-2022-21361		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59710 - Improper input validation
CVE-2022-21257		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 99 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Public exploit available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 75 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 - 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 78 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Public exploit available
Exploited
 - 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU26918 - Improper input validation
CVE-2020-2934		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020041904
SB2020061502
SB2021052616
and 6 more


Showing elements 121 - 140 out of 263