Advisories · Technology

Oracle Corporation WebLogic Server.

Every CVE that names Oracle Corporation WebLogic Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-46848 CVE record

CVSS 7.9 High

Improper access control in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Broken access control
Not analysed yet 16 Jun 2026
CVE-2026-35311 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Broken access control
Not analysed yet 16 Jun 2026
CVE-2026-35303 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 16 Jun 2026
CVE-2026-35302 CVE record

CVSS 8.3 High

Open redirect in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Open redirect
Not analysed yet 16 Jun 2026
CVE-2026-35301 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 16 Jun 2026
CVE-2026-35300 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Insecure deserialization
Not analysed yet 16 Jun 2026
CVE-2026-35299 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 16 Jun 2026
CVE-2026-35298 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Broken access control
Not analysed yet 16 Jun 2026
CVE-2026-35292 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 16 Jun 2026
CVE-2026-35291 CVE record

CVSS 6.6 Medium

Improper privilege management in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Privilege escalation
Not analysed yet 16 Jun 2026
CVE-2026-35263 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Broken access control
Not analysed yet 16 Jun 2026
CVE-2026-35259 CVE record

CVSS 8.8 High

Open redirect in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Open redirect
Not analysed yet 16 Jun 2026
CVE-2026-35258 CVE record

CVSS 8.7 High

Open redirect in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Open redirect
Not analysed yet 16 Jun 2026
CVE-2024-21183 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 16 Jul 2024
CVE-2024-21182 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 16 Jul 2024
CVE-2024-21181 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 16 Jul 2024
CVE-2024-21175 CVE record

CVSS 7.5 High

Out-of-bounds write in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Memory corruption
Not analysed yet 16 Jul 2024
CVE-2024-21007 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 16 Apr 2024
CVE-2024-21006 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 16 Apr 2024
CVE-2024-20986 CVE record

CVSS 6.1 Medium

Cross-site request forgery in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Cross-site request forgery (CSRF)
Not analysed yet 17 Feb 2024
CVE-2024-20931 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Improper access control in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Broken access control
Not analysed yet 17 Feb 2024
CVE-2024-20927 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Broken access control
Not analysed yet 17 Feb 2024
CVE-2023-22108 CVE record

CVSS 7.5 High

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 17 Oct 2023
CVE-2023-22101 CVE record

CVSS 8.1 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 17 Oct 2023
CVE-2023-22089 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 17 Oct 2023
CVE-2023-22086 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Information disclosure
Not analysed yet 17 Oct 2023
CVE-2023-22072 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 17 Oct 2023
CVE-2023-22069 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 17 Oct 2023
CVE-2023-22040 CVE record

CVSS 6.5 Medium

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 18 Jul 2023
CVE-2023-22031 CVE record

CVSS 4.4 Medium

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 18 Jul 2023
CVE-2023-21996 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Denial of service
Not analysed yet 18 Apr 2023
CVE-2023-21979 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 18 Apr 2023
CVE-2023-21964 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Denial of service
Not analysed yet 18 Apr 2023
CVE-2023-21960 CVE record

CVSS 5.6 Medium

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 18 Apr 2023
CVE-2023-21956 CVE record

CVSS 6.1 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 18 Apr 2023
CVE-2023-21931 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 18 Apr 2023
CVE-2023-21842 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 17 Jan 2023
CVE-2023-21841 CVE record

CVSS 7.5 High

Improper authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 17 Jan 2023
CVE-2023-21839 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 17 Jan 2023
CVE-2023-21838 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Denial of service
Not analysed yet 17 Jan 2023
CVE-2023-21837 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation WebLogic Server
- Oracle Corporation WebLogic Server
- Authentication bypass
Not analysed yet 17 Jan 2023
CVE-2022-21616 CVE record

CVSS 5.2 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 18 Oct 2022
CVE-2022-21564 CVE record

CVSS 5.3 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jul 2022
CVE-2022-21560 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jul 2022
CVE-2022-21557 CVE record

CVSS 5.7 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jul 2022
CVE-2022-21548 CVE record

CVSS 6.5 Medium

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jul 2022
CVE-2022-21453 CVE record

CVSS 6.1 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Apr 2022
CVE-2022-21441 CVE record

CVSS 7.5 High

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 19 Apr 2022
CVE-2022-21386 CVE record

CVSS 6.1 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21371 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21361 CVE record

CVSS 6.1 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21353 CVE record

CVSS 6.5 Medium

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21350 CVE record

CVSS 6.5 Medium

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21347 CVE record

CVSS 6.5 Medium

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21306 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21292 CVE record

CVSS 7.5 High

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21262 CVE record

CVSS 6.1 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21261 CVE record

CVSS 6.1 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21260 CVE record

CVSS 6.1 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022
CVE-2022-21259 CVE record

CVSS 6.1 Medium

Oracle Corporation WebLogic Server: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware…
- Oracle Corporation WebLogic Server
Not analysed yet 19 Jan 2022