Sign inStart freeBook a demo

Weblogic Server vulnerabilitiesAnd the versions its exploited flaws hit.

Product16 known exploited48 versions
The short answer

Weblogic Server is made by Oracle. We track 299 published vulnerabilities listed under that exact name, across 48 versions. 16 of them are on the list of flaws known to be exploited, the newest added on 1 June 2026. Oracle lists newer releases under their own names, such as Weblogic Server Proxy Plug-in, so check those pages too.

Check your version

The most recent Weblogic Server flaw added to the known-exploited list is CVE-2024-21182, on 1 June 2026. We keep watching the known-exploited list.

Other names

Is Weblogic Server listed under other names? Yes.

Oracle also lists Weblogic Server under more specific names, such as Weblogic Server Proxy Plug-in and Weblogic Server Component. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.

Versions

Which versions of Weblogic Server do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

  • CVE-2024-21182Exploited list, 1 Jun 2026

    Oracle WebLogic Server Unspecified Vulnerability

    12.2.1.4.014.1.1.0.0
  • CVE-2020-11023Exploited list, 23 Jan 2025

    JQuery Cross-Site Scripting (XSS) Vulnerability

    12.1.3.0.012.2.1.3.012.2.1.4.014.1.1.0.0
  • CVE-2020-2883Exploited list, 7 Jan 2025

    Oracle WebLogic Server Unspecified Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.3.012.2.1.4.0
  • CVE-2020-14644Exploited list, 18 Sep 2024

    Oracle WebLogic Server Remote Code Execution Vulnerability

    12.2.1.3.012.2.1.4.014.1.1.0.0
  • CVE-2017-3506Exploited list, 3 Jun 2024

    Oracle WebLogic Server OS Command Injection Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.0.012.2.1.1.012.2.1.2.0
  • CVE-2020-2551Exploited list, 16 Nov 2023

    Oracle Fusion Middleware Unspecified Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.3.012.2.1.4.0
  • CVE-2023-21839Exploited list, 1 May 2023

    Oracle WebLogic Server Unspecified Vulnerability

    12.2.1.3.012.2.1.4.014.1.1.0.0
  • CVE-2018-2628Exploited list, 8 Sep 2022

    Oracle WebLogic Server Unspecified Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.2.012.2.1.3
  • CVE-2022-22965Exploited list, 4 Apr 2022

    Spring Framework JDK 9+ Remote Code Execution Vulnerability

    12.2.1.3.012.2.1.4.014.1.1.0.0
  • CVE-2017-10271Exploited list, 10 Feb 2022

    Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.1.012.2.1.2.0
  • CVE-2019-2725Exploited list, 10 Jan 2022

    Oracle WebLogic Server, Injection

    10.3.6.0.012.1.3.0.0
  • CVE-2020-14750Exploited list, 3 Nov 2021

    Oracle WebLogic Server Remote Code Execution Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.3.012.2.1.4.014.1.1.0.0
  • CVE-2017-5638Exploited list, 3 Nov 2021

    Apache Struts Remote Code Execution Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.1.012.2.1.2.0
  • CVE-2015-4852Exploited list, 3 Nov 2021

    Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

    10.3.6.0.012.1.2.0.012.1.3.0.012.2.1.0.0
  • CVE-2020-14882Exploited list, 3 Nov 2021

    Oracle WebLogic Server Remote Code Execution Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.3.012.2.1.4.014.1.1.0.0
  • CVE-2020-14883Exploited list, 3 Nov 2021

    Oracle WebLogic Server Unspecified Vulnerability

    10.3.6.0.012.1.3.0.012.2.1.3.012.2.1.4.014.1.1.0.0
Known exploited

Which Weblogic Server vulnerabilities are being exploited?

16 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.5
    CVE-2024-21182HighKnown exploited
    Oracle WebLogic Server Unspecified Vulnerability

    Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.

    Chance of use74%Known exploited since1 Jun 2026
  2. 6.9
    CVE-2020-11023MediumKnown exploited
    JQuery Cross-Site Scripting (XSS) Vulnerability

    JQuery contains a persistent cross-site scripting (XSS) vulnerability.

    Chance of use85%Known exploited since23 Jan 2025
  3. 9.8
    CVE-2020-2883CriticalKnown exploited
    Oracle WebLogic Server Unspecified Vulnerability

    Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.

    Chance of use95%Known exploited since7 Jan 2025
  4. 9.8
    CVE-2020-14644CriticalKnown exploited
    Oracle WebLogic Server Remote Code Execution Vulnerability

    Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability.

    Chance of use95%Known exploited since18 Sep 2024
  5. 7.4
    CVE-2017-3506HighKnown exploited
    Oracle WebLogic Server OS Command Injection Vulnerability

    Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that...

    Chance of use96%Known exploited since3 Jun 2024
  6. 9.8
    CVE-2020-2551CriticalKnown exploited
    Oracle Fusion Middleware Unspecified Vulnerability

    Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.

    Chance of use93%Known exploited since16 Nov 2023
  7. 7.5
    CVE-2023-21839HighKnown exploited
    Oracle WebLogic Server Unspecified Vulnerability

    Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.

    Chance of use>99%Known exploited since1 May 2023
  8. 9.8
    CVE-2018-2628CriticalKnown exploited
    Oracle WebLogic Server Unspecified Vulnerability

    Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.

    Chance of use>99%Known exploited since8 Sep 2022
Exploit likelihood

Which Weblogic Server flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. >99%
    CVE-2017-5638CriticalKnown exploited

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers...

    CVSS9.8Published11 Mar 2017
  2. >99%
    CVE-2021-45105Medium

    Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

    CVSS5.9Published18 Dec 2021
  3. >99%
    CVE-2020-14882CriticalKnown exploited

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    CVSS9.8Published21 Oct 2020
  4. >99%
    CVE-2017-10271HighKnown exploited

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security).

    CVSS7.5Published19 Oct 2017
  5. >99%
    CVE-2019-2725CriticalKnown exploited

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

    CVSS9.8Published26 Apr 2019
  6. >99%
    CVE-2018-2628CriticalKnown exploited

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).

    CVSS9.8Published19 Apr 2018
  7. >99%
    CVE-2023-21839HighKnown exploited

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CVSS7.5Published18 Jan 2023
  8. >99%
    CVE-2022-22965CriticalKnown exploited

    A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

    CVSS9.8Published1 Apr 2022
  9. >99%
    CVE-2020-14750CriticalKnown exploited

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    CVSS9.8Published2 Nov 2020
  10. >99%
    CVE-2020-11022Medium

    In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

    CVSS6.1Published29 Apr 2020
Precursor Intelligence

Running Weblogic Server? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 299 published vulnerabilities listed under the name Weblogic Server, across 48 versions. The most recent Weblogic Server flaw added to the known-exploited list is CVE-2024-21182, on 1 June 2026.

16 are on the list of flaws known to be exploited. The most recently added are CVE-2024-21182, CVE-2020-11023 and CVE-2020-2883.

Oracle also lists Weblogic Server under more specific names, such as Weblogic Server Proxy Plug-in and Weblogic Server Component. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.

Each flaw names its own versions, usually as ranges. The newest, CVE-2024-21182, affects 12.2.1.4.0, 14.1.1.0.0. The versions for every exploited flaw are listed on this page.

Create a Precursor Intelligence account and track Weblogic Server. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring