Advisories · Technology

Oracle Corporation Oracle WebLogic Server.

Every CVE that names Oracle Corporation Oracle WebLogic Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-91502 CVE record

CVSS 7.3 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91323 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87302 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83399 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-101515 CVE record

CVSS 5.9 Medium

Oracle Corporation Oracle WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation Oracle WebLogic Server
Not analysed yet 20 Oct 2026
CVE-2026-83038 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83021 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 15 Sept 2026
CVE-2026-70757 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 15 Sept 2026
CVE-2026-70756 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 15 Sept 2026
CVE-2026-70748 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 15 Sept 2026
CVE-2026-60977 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-60702 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-60699 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-60698 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 18 Aug 2026
CVE-2026-60696 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 18 Aug 2026
CVE-2026-60680 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-60679 CVE record

CVSS 7.5 High

Improper authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 18 Aug 2026
CVE-2026-60672 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 18 Aug 2026
CVE-2026-60415 CVE record

CVSS 8.1 High

Information disclosure in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Information disclosure
Not analysed yet 18 Aug 2026
CVE-2026-60529 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60528 CVE record

CVSS 7.6 High

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60527 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60343 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60313 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60312 CVE record

CVSS 8.1 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60294 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60293 CVE record

CVSS 8.6 High

Information disclosure in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Information disclosure
Not analysed yet 21 Jul 2026
CVE-2026-60292 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60291 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60208 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Denial of service
Not analysed yet 21 Jul 2026
CVE-2026-60207 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60206 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60205 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60204 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60203 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60202 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60201 CVE record

CVSS 8.1 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60200 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60199 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60198 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-60196 CVE record

CVSS 8.4 High

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60153 CVE record

CVSS 7.2 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-34315 CVE record

CVSS 6.5 Medium

Open redirect in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
- Open redirect
Not analysed yet 21 Apr 2026
CVE-2026-34305 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Information disclosure
Not analysed yet 21 Apr 2026
CVE-2026-34292 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 21 Apr 2026
CVE-2025-61764 CVE record

CVSS 5.3 Medium

Information disclosure in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Information disclosure
Not analysed yet 21 Oct 2025
CVE-2025-61752 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Oct 2025
CVE-2025-50073 CVE record

CVSS 6.1 Medium

Improper authorization in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-50072 CVE record

CVSS 4.0 Medium

Improper access control in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-50064 CVE record

CVSS 4.8 Medium

Improper privilege management in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Privilege escalation
Not analysed yet 15 Jul 2025
CVE-2025-30762 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 15 Jul 2025
CVE-2025-30753 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Denial of service
Not analysed yet 15 Jul 2025
CVE-2025-21549 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Denial of service
Not analysed yet 21 Jan 2025
CVE-2025-21535 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 21 Jan 2025
CVE-2024-21274 CVE record

CVSS 7.5 High

Buffer overflow in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Memory corruption
Not analysed yet 15 Oct 2024
CVE-2024-21260 CVE record

CVSS 7.5 High

Incorrect authorization in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 15 Oct 2024
CVE-2024-21234 CVE record

CVSS 7.5 High

Missing authorization in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 15 Oct 2024
CVE-2024-21216 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authorization in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 15 Oct 2024
CVE-2024-21215 CVE record

CVSS 7.5 High

Missing authorization in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Broken access control
Not analysed yet 15 Oct 2024