Oracle WebLogic Server

16 known vulnerabilities in Oracle WebLogic Server, 11 critical, 11 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2024-21182 CVSS 7.5 high · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2023-21839 CVSS 7.5 high · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2020-14750 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Remote Code Execution Vulnerability
  • CVE-2020-14883 CVSS 7.2 high · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2020-14882 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Remote Code Execution Vulnerability
  • CVE-2020-14644 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Remote Code Execution Vulnerability
  • CVE-2020-2883 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2020-2551 CVSS 9.8 critical · actively exploited Oracle Fusion Middleware Unspecified Vulnerability
  • CVE-2018-2628 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2017-10271 CVSS 7.5 high · actively exploited Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Latest vulnerabilities

  • CVE-2026-83038 CVSS 9.9 critical Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that…
  • CVE-2026-83021 CVSS 10.0 critical Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are…
  • CVE-2026-70757 CVSS 9.8 critical Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected…
  • CVE-2026-70756 CVSS 9.8 critical Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected…
  • CVE-2026-70748 CVSS 9.8 critical Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected…
  • CVE-2024-21182 CVSS 7.5 high · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2023-21839 CVSS 7.5 high · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2020-14750 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Remote Code Execution Vulnerability
  • CVE-2020-14883 CVSS 7.2 high · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2020-14882 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Remote Code Execution Vulnerability
  • CVE-2020-14644 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Remote Code Execution Vulnerability
  • CVE-2020-2883 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2020-2551 CVSS 9.8 critical · actively exploited Oracle Fusion Middleware Unspecified Vulnerability
  • CVE-2018-2628 CVSS 9.8 critical · actively exploited Oracle WebLogic Server Unspecified Vulnerability
  • CVE-2017-10271 CVSS 7.5 high · actively exploited Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
  • CVE-2017-3506 CVSS 7.4 high · actively exploited Oracle WebLogic Server OS Command Injection Vulnerability