# Weblogic Server vulnerabilities > Weblogic Server is made by Oracle. We track 299 published vulnerabilities listed under that exact name, across 48 versions. 16 of them are on the list of flaws known to be exploited, the newest added on 1 June 2026. Oracle lists newer releases under their own names, such as Weblogic Server Proxy Plug-in, so check those pages too. Canonical page: https://www.precursorintelligence.com/product/oracle/weblogic_server ## At a glance - **Made by:** [Oracle](https://www.precursorintelligence.com/vendors/oracle) - **Published vulnerabilities:** 299 - **Known to be exploited:** 16 (listed under the name Weblogic Server) - **Versions tracked:** 48 - **Most recently added to the known-exploited list:** [CVE-2024-21182](https://www.precursorintelligence.com/what-is/cve-2024-21182), 1 June 2026. We keep watching the list. ## Is Weblogic Server listed under other names? Oracle also lists Weblogic Server under more specific names, such as Weblogic Server Proxy Plug-in and Weblogic Server Component. Flaws listed only under those names are counted on their own pages, not here. - [Weblogic Server Proxy Plug-in](https://www.precursorintelligence.com/product/oracle/weblogic_server_proxy_plug-in): 13 published vulnerabilities - [Weblogic Server Component](https://www.precursorintelligence.com/product/oracle/weblogic_server_component): 4 published vulnerabilities ## Which versions of Weblogic Server do the exploited flaws hit? Each exploited flaw lists the versions it affects, as published. - [CVE-2024-21182](https://www.precursorintelligence.com/what-is/cve-2024-21182) (Oracle WebLogic Server Unspecified Vulnerability): 12.2.1.4.0, 14.1.1.0.0 - [CVE-2020-11023](https://www.precursorintelligence.com/what-is/cve-2020-11023) (JQuery Cross-Site Scripting (XSS) Vulnerability): 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 - [CVE-2020-2883](https://www.precursorintelligence.com/what-is/cve-2020-2883) (Oracle WebLogic Server Unspecified Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 - [CVE-2020-14644](https://www.precursorintelligence.com/what-is/cve-2020-14644) (Oracle WebLogic Server Remote Code Execution Vulnerability): 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 - [CVE-2017-3506](https://www.precursorintelligence.com/what-is/cve-2017-3506) (Oracle WebLogic Server OS Command Injection Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 - [CVE-2020-2551](https://www.precursorintelligence.com/what-is/cve-2020-2551) (Oracle Fusion Middleware Unspecified Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 - [CVE-2023-21839](https://www.precursorintelligence.com/what-is/cve-2023-21839) (Oracle WebLogic Server Unspecified Vulnerability): 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 - [CVE-2018-2628](https://www.precursorintelligence.com/what-is/cve-2018-2628) (Oracle WebLogic Server Unspecified Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3 - [CVE-2022-22965](https://www.precursorintelligence.com/what-is/cve-2022-22965) (Spring Framework JDK 9+ Remote Code Execution Vulnerability): 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 - [CVE-2017-10271](https://www.precursorintelligence.com/what-is/cve-2017-10271) (Oracle Corporation WebLogic Server Remote Code Execution Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 - [CVE-2019-2725](https://www.precursorintelligence.com/what-is/cve-2019-2725) (Oracle WebLogic Server, Injection): 10.3.6.0.0, 12.1.3.0.0 - [CVE-2020-14750](https://www.precursorintelligence.com/what-is/cve-2020-14750) (Oracle WebLogic Server Remote Code Execution Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 - [CVE-2017-5638](https://www.precursorintelligence.com/what-is/cve-2017-5638) (Apache Struts Remote Code Execution Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 - [CVE-2015-4852](https://www.precursorintelligence.com/what-is/cve-2015-4852) (Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability): 10.3.6.0.0, 12.1.2.0.0, 12.1.3.0.0, 12.2.1.0.0 - [CVE-2020-14882](https://www.precursorintelligence.com/what-is/cve-2020-14882) (Oracle WebLogic Server Remote Code Execution Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 - [CVE-2020-14883](https://www.precursorintelligence.com/what-is/cve-2020-14883) (Oracle WebLogic Server Unspecified Vulnerability): 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 ## Which Weblogic Server vulnerabilities are being exploited? 16 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2024-21182](https://www.precursorintelligence.com/what-is/cve-2024-21182): Oracle WebLogic Server Unspecified Vulnerability. High, CVSS 7.5, chance of use in 30 days 74%, known exploited since 1 June 2026. - [CVE-2020-11023](https://www.precursorintelligence.com/what-is/cve-2020-11023): JQuery Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.9, chance of use in 30 days 85%, known exploited since 23 January 2025. - [CVE-2020-2883](https://www.precursorintelligence.com/what-is/cve-2020-2883): Oracle WebLogic Server Unspecified Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 7 January 2025. - [CVE-2020-14644](https://www.precursorintelligence.com/what-is/cve-2020-14644): Oracle WebLogic Server Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 18 September 2024. - [CVE-2017-3506](https://www.precursorintelligence.com/what-is/cve-2017-3506): Oracle WebLogic Server OS Command Injection Vulnerability. High, CVSS 7.4, chance of use in 30 days 96%, known exploited since 3 June 2024. - [CVE-2020-2551](https://www.precursorintelligence.com/what-is/cve-2020-2551): Oracle Fusion Middleware Unspecified Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 93%, known exploited since 16 November 2023. - [CVE-2023-21839](https://www.precursorintelligence.com/what-is/cve-2023-21839): Oracle WebLogic Server Unspecified Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 1 May 2023. - [CVE-2018-2628](https://www.precursorintelligence.com/what-is/cve-2018-2628): Oracle WebLogic Server Unspecified Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 8 September 2022. - [CVE-2022-22965](https://www.precursorintelligence.com/what-is/cve-2022-22965): Spring Framework JDK 9+ Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 4 April 2022. - [CVE-2017-10271](https://www.precursorintelligence.com/what-is/cve-2017-10271): Oracle Corporation WebLogic Server Remote Code Execution Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 10 February 2022. - [CVE-2019-2725](https://www.precursorintelligence.com/what-is/cve-2019-2725): Oracle WebLogic Server, Injection. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 10 January 2022. - [CVE-2020-14750](https://www.precursorintelligence.com/what-is/cve-2020-14750): Oracle WebLogic Server Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2017-5638](https://www.precursorintelligence.com/what-is/cve-2017-5638): Apache Struts Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2015-4852](https://www.precursorintelligence.com/what-is/cve-2015-4852): Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 3 November 2021. - [CVE-2020-14882](https://www.precursorintelligence.com/what-is/cve-2020-14882): Oracle WebLogic Server Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2020-14883](https://www.precursorintelligence.com/what-is/cve-2020-14883): Oracle WebLogic Server Unspecified Vulnerability. High, CVSS 7.2, chance of use in 30 days 98%, known exploited since 3 November 2021. ## Which Weblogic Server flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2017-5638](https://www.precursorintelligence.com/what-is/cve-2017-5638): >99%, Critical (CVSS 9.8), known exploited - [CVE-2021-45105](https://www.precursorintelligence.com/what-is/cve-2021-45105): >99%, Medium (CVSS 5.9) - [CVE-2020-14882](https://www.precursorintelligence.com/what-is/cve-2020-14882): >99%, Critical (CVSS 9.8), known exploited - [CVE-2017-10271](https://www.precursorintelligence.com/what-is/cve-2017-10271): >99%, High (CVSS 7.5), known exploited - [CVE-2019-2725](https://www.precursorintelligence.com/what-is/cve-2019-2725): >99%, Critical (CVSS 9.8), known exploited - [CVE-2018-2628](https://www.precursorintelligence.com/what-is/cve-2018-2628): >99%, Critical (CVSS 9.8), known exploited - [CVE-2023-21839](https://www.precursorintelligence.com/what-is/cve-2023-21839): >99%, High (CVSS 7.5), known exploited - [CVE-2022-22965](https://www.precursorintelligence.com/what-is/cve-2022-22965): >99%, Critical (CVSS 9.8), known exploited - [CVE-2020-14750](https://www.precursorintelligence.com/what-is/cve-2020-14750): >99%, Critical (CVSS 9.8), known exploited - [CVE-2020-11022](https://www.precursorintelligence.com/what-is/cve-2020-11022): >99%, Medium (CVSS 6.1) ## Questions ### How many vulnerabilities does Weblogic Server have? We track 299 published vulnerabilities listed under the name Weblogic Server, across 48 versions. The most recent Weblogic Server flaw added to the known-exploited list is CVE-2024-21182, on 1 June 2026. ### Which Weblogic Server vulnerabilities are being exploited? 16 are on the list of flaws known to be exploited. The most recently added are CVE-2024-21182, CVE-2020-11023 and CVE-2020-2883. ### Why are newer Weblogic Server flaws missing from this page? Oracle also lists Weblogic Server under more specific names, such as Weblogic Server Proxy Plug-in and Weblogic Server Component. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list. ### Which versions of Weblogic Server do the exploited flaws affect? Each flaw names its own versions, usually as ranges. The newest, CVE-2024-21182, affects 12.2.1.4.0, 14.1.1.0.0. The versions for every exploited flaw are listed on this page. ### How do I get alerts for Weblogic Server? Create a Precursor Intelligence account and track Weblogic Server. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook. ## Running Weblogic Server? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact