# Oracle Corporation WebLogic Server.

Every CVE that names Oracle Corporation WebLogic Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Improper access control in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-46848.md)
  `CVE-2026-46848` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.9 High · Not analysed yet · Published 16 Jun 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35311.md)
  `CVE-2026-35311` · CVE record: Oracle Corporation WebLogic Server · CVSS 8.8 High · Not analysed yet · Published 16 Jun 2026 · Tags: Broken access control
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35303.md)
  `CVE-2026-35303` · CVE record: Oracle Corporation WebLogic Server · CVSS 8.8 High · Not analysed yet · Published 16 Jun 2026 · Tags: Authentication bypass
- [Open redirect in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35302.md)
  `CVE-2026-35302` · CVE record: Oracle Corporation WebLogic Server · CVSS 8.3 High · Not analysed yet · Published 16 Jun 2026 · Tags: Open redirect
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35301.md)
  `CVE-2026-35301` · CVE record: Oracle Corporation WebLogic Server · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Authentication bypass
- [Deserialization of untrusted data in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35300.md)
  `CVE-2026-35300` · CVE record: Oracle Corporation WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Insecure deserialization
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35299.md)
  `CVE-2026-35299` · CVE record: Oracle Corporation WebLogic Server · CVSS 8.8 High · Not analysed yet · Published 16 Jun 2026 · Tags: Authentication bypass
- [Improper access control in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35298.md)
  `CVE-2026-35298` · CVE record: Oracle Corporation WebLogic Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Broken access control
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35292.md)
  `CVE-2026-35292` · CVE record: Oracle Corporation WebLogic Server · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Authentication bypass
- [Improper privilege management in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35291.md)
  `CVE-2026-35291` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Privilege escalation
- [Improper access control in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35263.md)
  `CVE-2026-35263` · CVE record: Oracle Corporation WebLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Broken access control
- [Open redirect in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35259.md)
  `CVE-2026-35259` · CVE record: Oracle Corporation WebLogic Server · CVSS 8.8 High · Not analysed yet · Published 16 Jun 2026 · Tags: Open redirect
- [Open redirect in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2026-35258.md)
  `CVE-2026-35258` · CVE record: Oracle Corporation WebLogic Server · CVSS 8.7 High · Not analysed yet · Published 16 Jun 2026 · Tags: Open redirect
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2024-21183.md)
  `CVE-2024-21183` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 16 Jul 2024 · Tags: Authentication bypass
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2024-21182.md)
  `CVE-2024-21182` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.74 · Not analysed yet · Published 16 Jul 2024
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2024-21181.md)
  `CVE-2024-21181` · CVE record: Oracle Corporation WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2024
- [Out-of-bounds write in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2024-21175.md)
  `CVE-2024-21175` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 16 Jul 2024 · Tags: Memory corruption
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2024-21007.md)
  `CVE-2024-21007` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 16 Apr 2024 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2024-21006.md)
  `CVE-2024-21006` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 16 Apr 2024 · Tags: Authentication bypass
- [Cross-site request forgery in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2024-20986.md)
  `CVE-2024-20986` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 17 Feb 2024 · Tags: Cross-site request forgery (CSRF)
- [Improper access control in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2024-20931.md)
  `CVE-2024-20931` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.60 · Not analysed yet · Published 17 Feb 2024 · Tags: Broken access control
- [Improper access control in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2024-20927.md)
  `CVE-2024-20927` · CVE record: Oracle Corporation WebLogic Server · CVSS 8.6 High · Not analysed yet · Published 17 Feb 2024 · Tags: Broken access control
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2023-22108.md)
  `CVE-2023-22108` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 17 Oct 2023
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-22101.md)
  `CVE-2023-22101` · CVE record: Oracle Corporation WebLogic Server · CVSS 8.1 High · Not analysed yet · Published 17 Oct 2023 · Tags: Authentication bypass
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2023-22089.md)
  `CVE-2023-22089` · CVE record: Oracle Corporation WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Oct 2023
- [Information disclosure in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-22086.md)
  `CVE-2023-22086` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 17 Oct 2023 · Tags: Information disclosure
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-22072.md)
  `CVE-2023-22072` · CVE record: Oracle Corporation WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Oct 2023 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-22069.md)
  `CVE-2023-22069` · CVE record: Oracle Corporation WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Oct 2023 · Tags: Authentication bypass
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2023-22040.md)
  `CVE-2023-22040` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.5 Medium · Not analysed yet · Published 18 Jul 2023
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2023-22031.md)
  `CVE-2023-22031` · CVE record: Oracle Corporation WebLogic Server · CVSS 4.4 Medium · Not analysed yet · Published 18 Jul 2023
- [Uncontrolled resource consumption in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21996.md)
  `CVE-2023-21996` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 18 Apr 2023 · Tags: Denial of service
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21979.md)
  `CVE-2023-21979` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 18 Apr 2023 · Tags: Authentication bypass
- [Uncontrolled resource consumption in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21964.md)
  `CVE-2023-21964` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 18 Apr 2023 · Tags: Denial of service
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2023-21960.md)
  `CVE-2023-21960` · CVE record: Oracle Corporation WebLogic Server · CVSS 5.6 Medium · Not analysed yet · Published 18 Apr 2023
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2023-21956.md)
  `CVE-2023-21956` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 18 Apr 2023
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21931.md)
  `CVE-2023-21931` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.82 · Not analysed yet · Published 18 Apr 2023 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21842.md)
  `CVE-2023-21842` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 17 Jan 2023 · Tags: Authentication bypass
- [Improper authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21841.md)
  `CVE-2023-21841` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 17 Jan 2023 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21839.md)
  `CVE-2023-21839` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 17 Jan 2023 · Tags: Authentication bypass
- [Uncontrolled resource consumption in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21838.md)
  `CVE-2023-21838` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 17 Jan 2023 · Tags: Denial of service
- [Missing authentication in Oracle Corporation WebLogic Server](https://agentprime.io/advisories/CVE-2023-21837.md)
  `CVE-2023-21837` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 17 Jan 2023 · Tags: Authentication bypass
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21616.md)
  `CVE-2022-21616` · CVE record: Oracle Corporation WebLogic Server · CVSS 5.2 Medium · Not analysed yet · Published 18 Oct 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21564.md)
  `CVE-2022-21564` · CVE record: Oracle Corporation WebLogic Server · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2022
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2022-21560.md)
  `CVE-2022-21560` · CVE record: Oracle Corporation WebLogic Server · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21557.md)
  `CVE-2022-21557` · CVE record: Oracle Corporation WebLogic Server · CVSS 5.7 Medium · Not analysed yet · Published 19 Jul 2022
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2022-21548.md)
  `CVE-2022-21548` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.5 Medium · Not analysed yet · Published 19 Jul 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21453.md)
  `CVE-2022-21453` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 19 Apr 2022
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2022-21441.md)
  `CVE-2022-21441` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 19 Apr 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21386.md)
  `CVE-2022-21386` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 19 Jan 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21371.md)
  `CVE-2022-21371` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.93 · Not analysed yet · Published 19 Jan 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21361.md)
  `CVE-2022-21361` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 19 Jan 2022
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2022-21353.md)
  `CVE-2022-21353` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2022-21350.md)
  `CVE-2022-21350` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2022-21347.md)
  `CVE-2022-21347` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022
- [Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).](https://agentprime.io/advisories/CVE-2022-21306.md)
  `CVE-2022-21306` · CVE record: Oracle Corporation WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jan 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21292.md)
  `CVE-2022-21292` · CVE record: Oracle Corporation WebLogic Server · CVSS 7.5 High · Not analysed yet · Published 19 Jan 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21262.md)
  `CVE-2022-21262` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 19 Jan 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21261.md)
  `CVE-2022-21261` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 19 Jan 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21260.md)
  `CVE-2022-21260` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 19 Jan 2022
- [Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…](https://agentprime.io/advisories/CVE-2022-21259.md)
  `CVE-2022-21259` · CVE record: Oracle Corporation WebLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 19 Jan 2022

Older: <https://agentprime.io/advisories/technology/oracle-corporation-weblogic-server.md?cursor=WyIyMDIyLTAxLTE5VDExOjIyOjI0LjAwMDAwMFoiLCJDVkUtMjAyMi0yMTI1OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=oracle-corporation-weblogic-server>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/oracle-corporation-weblogic-server/>. Everything for agents: <https://agentprime.io/llms.txt>.