Known vulnerabilities in Oracle WebLogic Server - page 3

Vendor: Oracle
Software: Oracle WebLogic Server
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 286
Public exploits: 38
Known exploited (KEV): 17

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle WebLogic Server Oracle WebLogic Server is affected by 286 known vulnerabilities: 4 critical, 74 high, 167 medium, 41 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103148 - Improper input validation
CVE-2025-21535		 CWE-20 High
No
No
 - 21.01.2025 SB2025012238
SB2025051252
#VU103149 - Improper input validation
CVE-2023-7272		 CWE-20 High
No
No
 - 21.01.2025 SB2025012230
SB2025012238
SB2025071038
and 1 more
#VU103150 - Improper input validation
CVE-2025-21549		 CWE-20 Medium
No
No
 - 21.01.2025 SB2025012238
SB2025051252
#VU98627 - Improper input validation
CVE-2024-21216		 CWE-20 High
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98633 - Improper input validation
CVE-2024-21274		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
#VU98634 - Improper input validation
CVE-2024-21215		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98635 - Improper input validation
CVE-2024-21234		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU98636 - Improper input validation
CVE-2024-21260		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015170
SB2025051249
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 - 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU94548 - Improper input validation
CVE-2024-21181		 CWE-20 High
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU94549 - Improper input validation
CVE-2024-21175		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU94550 - Improper input validation
CVE-2024-21182		 CWE-20 Medium
Available
Exploited
 - 18.07.2024 SB20240718113
SB2025051251
#VU94551 - Improper input validation
CVE-2024-21183		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718113
SB2025051251
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 - 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU88637 - Improper input validation
CVE-2024-21006		 CWE-20 Medium
No
No
 - 17.04.2024 SB2024041739
SB2024051469
#VU88638 - Improper input validation
CVE-2024-21007		 CWE-20 Medium
No
No
 - 17.04.2024 SB2024041739
SB2024051469
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more


Showing elements 41 - 60 out of 286