Known vulnerabilities in Oracle WebLogic Server - page 2

Vendor: Oracle
Software: Oracle WebLogic Server
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 273
Public exploits: 38
Known exploited (KEV): 17
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle WebLogic Server Oracle WebLogic Server is affected by 273 known vulnerabilities: 4 critical, 63 high, 166 medium, 40 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 - 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 63 more
#VU103148 - Improper input validation
CVE-2025-21535		 CWE-20 High
No
No
 - 21.01.2025 SB2025012238
SB2025051252
#VU103149 - Improper input validation
CVE-2023-7272		 CWE-20 High
No
No
 - 21.01.2025 SB2025012230
SB2025012238
SB2025071038
and 1 more
#VU103150 - Improper input validation
CVE-2025-21549		 CWE-20 Medium
No
No
 - 21.01.2025 SB2025012238
SB2025051252
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 - 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98627 - Improper input validation
CVE-2024-21216		 CWE-20 High
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98633 - Improper input validation
CVE-2024-21274		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
#VU98634 - Improper input validation
CVE-2024-21215		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98635 - Improper input validation
CVE-2024-21234		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98636 - Improper input validation
CVE-2024-21260		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 - 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU94548 - Improper input validation
CVE-2024-21181		 CWE-20 High
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU94549 - Improper input validation
CVE-2024-21175		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU94550 - Improper input validation
CVE-2024-21182		 CWE-20 Medium
Available
Exploited
 - 18.07.2024 SB20240718113
SB2025051251
#VU94551 - Improper input validation
CVE-2024-21183		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 - 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 - 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 - 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more


Showing elements 21 - 40 out of 273