Known vulnerabilities in Oracle WebLogic Server - page 7

Vendor: Oracle
Software: Oracle WebLogic Server
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 273
Public exploits: 38
Known exploited (KEV): 17
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle WebLogic Server Oracle WebLogic Server is affected by 273 known vulnerabilities: 4 critical, 63 high, 166 medium, 40 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63479 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-23457		 CWE-22 High
No
No
 - 20.05.2022 SB2022052008
SB2022052009
SB2022052010
and 11 more
#VU62525 - Improper input validation
CVE-2022-21441		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042289
SB2022051249
#VU62529 - Out-of-bounds read
CVE-2022-21453		 CWE-125 Medium
No
No
 - 22.04.2022 SB2022042289
#VU62513 - Improper input validation
CVE-2021-28170		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042257
SB2022042289
SB2022061408
and 6 more
#VU62492 - Origin Validation Error
CVE-2021-26291		 CWE-346 High
No
No
 - 22.04.2022 SB2021042333
SB2022042228
SB2022072038
and 15 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 - 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU59711 - Improper input validation
CVE-2022-21258		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59712 - Improper input validation
CVE-2022-21259		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59713 - Improper input validation
CVE-2022-21260		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59714 - Improper input validation
CVE-2022-21261		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59715 - Improper input validation
CVE-2022-21262		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59716 - Improper input validation
CVE-2022-21386		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
#VU59717 - Improper input validation
CVE-2019-10219		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011837
SB2022070611
SB2022083134
and 4 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 - 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU11170 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-1324		 CWE-835 Low
No
No
 - 19.03.2018 SB2018032004
SB2018052906
SB2022011837
and 3 more


Showing elements 121 - 140 out of 273