Known vulnerabilities in Oracle WebLogic Server Proxy Plug-In

Vendor: Oracle
Software: Oracle WebLogic Server Proxy Plug-In
Software CPE: cpe:2.3:a:oracle:oracle_weblogic_server_proxy_plug-in:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 5
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle WebLogic Server Proxy Plug-In Oracle WebLogic Server Proxy Plug-In is affected by 5 known vulnerabilities: 1 critical, 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121716 - Heap-based Buffer Overflow
CVE-2026-21962		 CWE-122 Critical
Available
Exploited
 - 20.01.2026 SB20260120114
SB20260120125
#VU70994 - Memory corruption
CVE-2022-41342		 CWE-119 Low
No
No
 - 10.01.2023 SB2023011066
SB20260120110
SB20260120113
and 2 more
#VU65451 - Improper input validation
CVE-2020-35169		 CWE-20 High
No
No
 - 19.07.2022 SB2022072035
SB2022072036
SB2022072037
and 5 more
#VU52378 - Improper input validation
CVE-2020-5360		 CWE-20 Medium
No
No
 - 21.04.2021 SB2021042102
SB2021042527
SB2021042528
and 2 more
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843		 CWE-611 Medium
Available
No
 - 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more