Known vulnerabilities in Oracle WebLogic Server - page 14

Vendor: Oracle

Software: Oracle WebLogic Server

Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 273

Public exploits: 38

Known exploited (KEV): 17

Highest CVSSv4 Score: 9.3

Vulnerabilities (273)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU121835 - Out-of-bounds read CVE-2019-2452	CWE-125	Medium	No	No	-	24.12.2024	SB2019011580
#VU121836 - Out-of-bounds read CVE-2019-2418	CWE-125	Medium	No	No	-	24.12.2024	SB2019011580
#VU121838 - Out-of-bounds read CVE-2019-2395	CWE-125	Medium	No	No	-	24.12.2024	SB2019011580
#VU121840 - Out-of-bounds read CVE-2019-2441	CWE-125	Medium	No	No	-	24.12.2024	SB2019011580
#VU121841 - Out-of-bounds read CVE-2019-2398	CWE-125	Low	No	No	-	24.12.2024	SB2019011580
#VU27043 - Improper input validation CVE-2018-1000180	CWE-20	Medium	No	No	-	21.04.2020	SB2020042107 SB2018092415 SB2021042531 and 17 more
#VU13906 - Permissions, Privileges, and Access Controls CVE-2018-2894	CWE-264	Low	Available	No	-	17.07.2018	SB2018071719
#VU10055 - Deserialization of Untrusted Data CVE-2018-2628	CWE-502	High	Available	Exploited	-	17.01.2018	SB2018041912
#VU10034 - Exposure of sensitive information to an unauthorized actor CVE-2018-2625	CWE-200	Low	No	No	-	17.01.2018	SB2018011804
#VU9816 - Deserialization of Untrusted Data CVE-2017-3506	CWE-502	Critical	Available	Exploited	-	28.12.2017	SB2017042406
#VU9815 - Improper Access Control CVE-2017-10271	CWE-284	Low	Available	Exploited	-	28.12.2017	SB2017101943
#VU735 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2015-1832	CWE-611	Low	No	No	-	04.10.2016	SB2015071704 SB2020042337 SB2020102845 and 6 more
#VU47859 - Deserialization of Untrusted Data CVE-2015-4852	CWE-502	High	No	Exploited	12.2.1.1	18.11.2015	SB2015111012 SB2024060516 SB2024080102 and 1 more

Showing elements 261 - 280 out of 273