Known vulnerabilities in Oracle WebLogic Server 14.1.1.0.0 - page 7

Vendor: Oracle
Software: Oracle WebLogic Server
Version: 14.1.1.0.0
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 202
Public exploits: 26
Known exploited (KEV): 9

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle WebLogic Server version 14.1.1.0.0 Oracle WebLogic Server 14.1.1.0.0 is affected by 202 vulnerabilities: 2 critical, 50 high, 130 medium, 20 low Critical High Medium Low

Vulnerabilities (202)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65486 - Improper input validation
CVE-2022-24839		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU63479 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-23457		 CWE-22 High
No
No
 - 20.05.2022 SB2022052008
SB2022052009
SB2022052010
and 11 more
#VU62525 - Improper input validation
CVE-2022-21441		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042289
SB2022051249
#VU62529 - Out-of-bounds read
CVE-2022-21453		 CWE-125 Medium
No
No
 - 22.04.2022 SB2022042289
#VU62513 - Improper input validation
CVE-2021-28170		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042257
SB2022042289
SB2022061408
and 6 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Public exploit available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 - 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 42 more
#VU59711 - Improper input validation
CVE-2022-21258		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59712 - Improper input validation
CVE-2022-21259		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59713 - Improper input validation
CVE-2022-21260		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59714 - Improper input validation
CVE-2022-21261		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59715 - Improper input validation
CVE-2022-21262		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59716 - Improper input validation
CVE-2022-21386		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59717 - Improper input validation
CVE-2019-10219		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
SB2022070611
SB2022083134
and 4 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 98 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Public exploit available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 75 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU52501 - Server-Side Request Forgery (SSRF)
CVE-2020-11987		 CWE-918 Medium
No
No
 - 23.04.2021 SB2021042315
SB2021042316
SB2021042514
and 32 more
#VU11170 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-1324		 CWE-835 Low
No
No
 - 19.03.2018 SB2018032004
SB2018052906
SB2022011837
and 3 more


Showing elements 121 - 140 out of 202