[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy94E-kw_dmKoCDDVbKzDRyjogimDcFDAVGw_pUqMZzs":3,"g5a-family:oracle\u002Fweblogic_server":351,"g5a-ex:oracle\u002Fweblogic_server@*":357},{"success":4,"data":5},true,{"product":6,"versions":132,"topVulnerabilitiesByEpss":181,"kevVulnerabilities":238,"seoMetadata":329,"meta":348},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":131},"oracle","weblogic_server",48,299,15,"2025-10-21",[14,19,22,24,26,28,30,32,34,36,39,41,43,45,48,52,54,56,58,60,62,65,67,69,73,75,77,80,82,85,87,91,94,98,101,105,107,109,111,113,115,117,119,121,123,125,127,129],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0",3,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"10.0.2",1,{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},"10.3",{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.0.0.0",{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.1",{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.1.0.0",{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.2",{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},"10.3.2.0.0",{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.3",{"version":37,"cve_count":38,"kev_count":17,"has_kev":18},"10.3.3.0.0",2,{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.4.0.0",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.5.0.0",{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},"10.3.6",{"version":46,"cve_count":47,"kev_count":17,"has_kev":18},"10.3.6.0",5,{"version":49,"cve_count":50,"kev_count":51,"has_kev":4},"10.3.6.0.0",129,11,{"version":53,"cve_count":21,"kev_count":17,"has_kev":18},"11.1.1.7.0",{"version":55,"cve_count":21,"kev_count":17,"has_kev":18},"11.1.1.9.0",{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.1.0.0",{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.2",{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.2.0",{"version":63,"cve_count":64,"kev_count":21,"has_kev":4},"12.1.2.0.0",10,{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.3",{"version":68,"cve_count":47,"kev_count":17,"has_kev":18},"12.1.3.0",{"version":70,"cve_count":71,"kev_count":72,"has_kev":4},"12.1.3.0.0",148,12,{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.1",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.1.0",{"version":78,"cve_count":79,"kev_count":38,"has_kev":4},"12.2.1.0.0",18,{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.1.1",{"version":83,"cve_count":84,"kev_count":16,"has_kev":4},"12.2.1.1.0",14,{"version":86,"cve_count":38,"kev_count":17,"has_kev":18},"12.2.1.2",{"version":88,"cve_count":89,"kev_count":90,"has_kev":4},"12.2.1.2.0",19,4,{"version":92,"cve_count":93,"kev_count":21,"has_kev":4},"12.2.1.3",16,{"version":95,"cve_count":96,"kev_count":97,"has_kev":4},"12.2.1.3.0",173,9,{"version":99,"cve_count":100,"kev_count":97,"has_kev":4},"12.2.1.4.0",171,{"version":102,"cve_count":103,"kev_count":104,"has_kev":4},"14.1.1.0.0",138,7,{"version":106,"cve_count":38,"kev_count":17,"has_kev":18},"14.1.2.0.0",{"version":108,"cve_count":21,"kev_count":17,"has_kev":18},"6.1",{"version":110,"cve_count":38,"kev_count":17,"has_kev":18},"7.0",{"version":112,"cve_count":21,"kev_count":17,"has_kev":18},"7.0.7",{"version":114,"cve_count":16,"kev_count":17,"has_kev":18},"8.1",{"version":116,"cve_count":21,"kev_count":17,"has_kev":18},"8.1.6",{"version":118,"cve_count":90,"kev_count":17,"has_kev":18},"9.0",{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},"9.0.0.0.0",{"version":122,"cve_count":90,"kev_count":17,"has_kev":18},"9.1",{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},"9.1.0.0.0",{"version":126,"cve_count":47,"kev_count":17,"has_kev":18},"9.2",{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.0.0.0",{"version":130,"cve_count":21,"kev_count":17,"has_kev":18},"9.2.4","Weblogic Server by Oracle is a technology product with 48 tracked versions and 299 known security vulnerabilities including 15 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},{"version":37,"cve_count":38,"kev_count":17,"has_kev":18},{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},{"version":46,"cve_count":47,"kev_count":17,"has_kev":18},{"version":49,"cve_count":50,"kev_count":51,"has_kev":4},{"version":53,"cve_count":21,"kev_count":17,"has_kev":18},{"version":55,"cve_count":21,"kev_count":17,"has_kev":18},{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},{"version":63,"cve_count":64,"kev_count":21,"has_kev":4},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},{"version":68,"cve_count":47,"kev_count":17,"has_kev":18},{"version":70,"cve_count":71,"kev_count":72,"has_kev":4},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":79,"kev_count":38,"has_kev":4},{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},{"version":83,"cve_count":84,"kev_count":16,"has_kev":4},{"version":86,"cve_count":38,"kev_count":17,"has_kev":18},{"version":88,"cve_count":89,"kev_count":90,"has_kev":4},{"version":92,"cve_count":93,"kev_count":21,"has_kev":4},{"version":95,"cve_count":96,"kev_count":97,"has_kev":4},{"version":99,"cve_count":100,"kev_count":97,"has_kev":4},{"version":102,"cve_count":103,"kev_count":104,"has_kev":4},{"version":106,"cve_count":38,"kev_count":17,"has_kev":18},{"version":108,"cve_count":21,"kev_count":17,"has_kev":18},{"version":110,"cve_count":38,"kev_count":17,"has_kev":18},{"version":112,"cve_count":21,"kev_count":17,"has_kev":18},{"version":114,"cve_count":16,"kev_count":17,"has_kev":18},{"version":116,"cve_count":21,"kev_count":17,"has_kev":18},{"version":118,"cve_count":90,"kev_count":17,"has_kev":18},{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},{"version":122,"cve_count":90,"kev_count":17,"has_kev":18},{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},{"version":126,"cve_count":47,"kev_count":17,"has_kev":18},{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},{"version":130,"cve_count":21,"kev_count":17,"has_kev":18},[182,190,196,201,208,213,218,223,228,232],{"cveId":183,"description":184,"publishedDate":185,"cvssScore":186,"cvssVersion":187,"severity":188,"isKev":4,"epssScore":189},"CVE-2017-5638","The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.","2017-03-11",9.8,"v3.1","Critical",0.99999,{"cveId":191,"description":192,"publishedDate":193,"cvssScore":194,"cvssVersion":187,"severity":195,"isKev":18,"epssScore":189},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"Medium",{"cveId":197,"description":198,"publishedDate":199,"cvssScore":186,"cvssVersion":187,"severity":188,"isKev":4,"epssScore":200},"CVE-2020-14882","Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2020-10-21",0.99997,{"cveId":202,"description":203,"publishedDate":204,"cvssScore":205,"cvssVersion":187,"severity":206,"isKev":4,"epssScore":207},"CVE-2017-10271","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H).","2017-10-19",7.5,"High",0.99994,{"cveId":209,"description":210,"publishedDate":211,"cvssScore":186,"cvssVersion":187,"severity":188,"isKev":4,"epssScore":212},"CVE-2019-2725","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-04-26",0.99977,{"cveId":214,"description":215,"publishedDate":216,"cvssScore":186,"cvssVersion":187,"severity":188,"isKev":4,"epssScore":217},"CVE-2018-2628","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2018-04-19",0.99958,{"cveId":219,"description":220,"publishedDate":221,"cvssScore":205,"cvssVersion":187,"severity":206,"isKev":4,"epssScore":222},"CVE-2023-21839","Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2023-01-18",0.999,{"cveId":224,"description":225,"publishedDate":226,"cvssScore":186,"cvssVersion":187,"severity":188,"isKev":4,"epssScore":227},"CVE-2022-22965","A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","2022-04-01",0.99638,{"cveId":229,"description":198,"publishedDate":230,"cvssScore":186,"cvssVersion":187,"severity":188,"isKev":4,"epssScore":231},"CVE-2020-14750","2020-11-02",0.99247,{"cveId":233,"description":234,"publishedDate":235,"cvssScore":236,"cvssVersion":187,"severity":195,"isKev":18,"epssScore":237},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,0.99215,[239,248,257,264,272,281,289,293,296,300,304,308,311,314,321,323],{"cveId":240,"description":241,"publishedDate":242,"cvssScore":205,"severity":206,"isKev":4,"epssScore":243,"cisaVulnName":244,"cisaDateAdded":245,"cisaShortDescription":246,"cisaRequiredAction":247},"CVE-2024-21182","Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2024-07-16",0.74162,"Oracle WebLogic Server Unspecified Vulnerability","2026-06-01","Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":249,"description":250,"publishedDate":235,"cvssScore":251,"severity":195,"isKev":4,"epssScore":252,"cisaVulnName":253,"cisaDateAdded":254,"cisaShortDescription":255,"cisaRequiredAction":256},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",6.9,0.84887,"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":258,"description":259,"publishedDate":260,"cvssScore":186,"severity":188,"isKev":4,"epssScore":261,"cisaVulnName":244,"cisaDateAdded":262,"cisaShortDescription":263,"cisaRequiredAction":256},"CVE-2020-2883","Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2020-04-15",0.94582,"2025-01-07","Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.",{"cveId":265,"description":266,"publishedDate":267,"cvssScore":186,"severity":188,"isKev":4,"epssScore":268,"cisaVulnName":269,"cisaDateAdded":270,"cisaShortDescription":271,"cisaRequiredAction":256},"CVE-2020-14644","Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2020-07-15",0.94548,"Oracle WebLogic Server Remote Code Execution Vulnerability","2024-09-18","Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution.",{"cveId":273,"description":274,"publishedDate":275,"cvssScore":276,"severity":206,"isKev":4,"epssScore":277,"cisaVulnName":278,"cisaDateAdded":279,"cisaShortDescription":280,"cisaRequiredAction":256},"CVE-2017-3506","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N).","2017-04-24",7.4,0.95991,"Oracle WebLogic Server OS Command Injection Vulnerability","2024-06-03","Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.",{"cveId":282,"description":283,"publishedDate":284,"cvssScore":186,"severity":188,"isKev":4,"epssScore":285,"cisaVulnName":286,"cisaDateAdded":287,"cisaShortDescription":288,"cisaRequiredAction":256},"CVE-2020-2551","Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2020-01-15",0.92817,"Oracle Fusion Middleware Unspecified Vulnerability","2023-11-16","Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.",{"cveId":219,"description":220,"publishedDate":221,"cvssScore":205,"severity":206,"isKev":4,"epssScore":222,"cisaVulnName":244,"cisaDateAdded":290,"cisaShortDescription":291,"cisaRequiredAction":292},"2023-05-01","Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.","Apply updates per vendor instructions.",{"cveId":214,"description":215,"publishedDate":216,"cvssScore":186,"severity":188,"isKev":4,"epssScore":217,"cisaVulnName":244,"cisaDateAdded":294,"cisaShortDescription":295,"cisaRequiredAction":292},"2022-09-08","Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.",{"cveId":224,"description":225,"publishedDate":226,"cvssScore":186,"severity":188,"isKev":4,"epssScore":227,"cisaVulnName":297,"cisaDateAdded":298,"cisaShortDescription":299,"cisaRequiredAction":292},"Spring Framework JDK 9+ Remote Code Execution Vulnerability","2022-04-04","Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.",{"cveId":202,"description":203,"publishedDate":204,"cvssScore":205,"severity":206,"isKev":4,"epssScore":207,"cisaVulnName":301,"cisaDateAdded":302,"cisaShortDescription":303,"cisaRequiredAction":292},"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","2022-02-10","Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.",{"cveId":209,"description":210,"publishedDate":211,"cvssScore":186,"severity":188,"isKev":4,"epssScore":212,"cisaVulnName":305,"cisaDateAdded":306,"cisaShortDescription":307,"cisaRequiredAction":292},"Oracle WebLogic Server, Injection","2022-01-10","Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).",{"cveId":229,"description":198,"publishedDate":230,"cvssScore":186,"severity":188,"isKev":4,"epssScore":231,"cisaVulnName":269,"cisaDateAdded":309,"cisaShortDescription":310,"cisaRequiredAction":292},"2021-11-03","Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vulnerability is related to CVE-2020-14882.",{"cveId":183,"description":184,"publishedDate":185,"cvssScore":186,"severity":188,"isKev":4,"epssScore":189,"cisaVulnName":312,"cisaDateAdded":309,"cisaShortDescription":313,"cisaRequiredAction":292},"Apache Struts Remote Code Execution Vulnerability","Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.",{"cveId":315,"description":316,"publishedDate":317,"cvssScore":186,"severity":188,"isKev":4,"epssScore":318,"cisaVulnName":319,"cisaDateAdded":309,"cisaShortDescription":320,"cisaRequiredAction":292},"CVE-2015-4852","The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common\u002Fmodules\u002Fcom.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.","2015-11-18",0.94991,"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.",{"cveId":197,"description":198,"publishedDate":199,"cvssScore":186,"severity":188,"isKev":4,"epssScore":200,"cisaVulnName":269,"cisaDateAdded":309,"cisaShortDescription":322,"cisaRequiredAction":292},"Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerability being related to CVE-2020-14750.",{"cveId":324,"description":325,"publishedDate":199,"cvssScore":326,"severity":206,"isKev":4,"epssScore":327,"cisaVulnName":244,"cisaDateAdded":309,"cisaShortDescription":328,"cisaRequiredAction":292},"CVE-2020-14883","Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).",7.2,0.97734,"Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability.",{"title":330,"metaDescription":331,"keywords":332,"structuredData":333},"Weblogic Server by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Weblogic Server by Oracle covering 48 versions with 299 tracked vulnerabilities including 10 critical and 5 high-severity issues and 15 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Weblogic Server vulnerabilities, Weblogic Server security, Weblogic Server CVE, Oracle Weblogic Server, Weblogic Server threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Weblogic Server KEV, Weblogic Server exploited vulnerabilities",{"@context":334,"@type":335,"name":336,"description":331,"url":337,"manufacturer":338,"applicationCategory":342,"softwareVersion":343,"mainEntity":344},"https:\u002F\u002Fschema.org","SoftwareApplication","Weblogic Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fweblogic_server",{"@type":339,"name":340,"url":341},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","48 versions tracked",{"@type":345,"name":346,"description":347,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Weblogic Server Security Vulnerabilities","Security vulnerabilities affecting Weblogic Server by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":349,"apiVersion":350},"2026-10-17T10:38:32.643Z","3.0",[352,355],{"product":353,"cves":354},"weblogic_server_proxy_plug-in",13,{"product":356,"cves":90},"weblogic_server_component",{"rows":358,"total":93,"capped":18,"failed":17},[359,363,367,371,375,379,383,387,391,395,399,403,407,411,415,419],{"cveId":240,"name":244,"severity":206,"cvss":205,"added":245,"epss":243,"published":360,"ranges":361,"checked":4,"hits":362,"covers":18},"2024-07-16T23:15:22.66",[99,102],[],{"cveId":249,"name":253,"severity":195,"cvss":251,"added":254,"epss":252,"published":364,"ranges":365,"checked":4,"hits":366,"covers":18},"2020-04-29T21:15:11.743",[70,95,99,102],[],{"cveId":258,"name":244,"severity":188,"cvss":186,"added":262,"epss":261,"published":368,"ranges":369,"checked":4,"hits":370,"covers":18},"2020-04-15T14:15:33.513",[49,70,95,99],[],{"cveId":265,"name":269,"severity":188,"cvss":186,"added":270,"epss":268,"published":372,"ranges":373,"checked":4,"hits":374,"covers":18},"2020-07-15T18:15:29.457",[95,99,102],[],{"cveId":273,"name":278,"severity":206,"cvss":276,"added":279,"epss":277,"published":376,"ranges":377,"checked":4,"hits":378,"covers":18},"2017-04-24T19:59:03.037",[49,70,78,83,88],[],{"cveId":282,"name":286,"severity":188,"cvss":186,"added":287,"epss":285,"published":380,"ranges":381,"checked":4,"hits":382,"covers":18},"2020-01-15T17:15:17.19",[49,70,95,99],[],{"cveId":219,"name":244,"severity":206,"cvss":205,"added":290,"epss":222,"published":384,"ranges":385,"checked":4,"hits":386,"covers":18},"2023-01-18T00:15:13.45",[95,99,102],[],{"cveId":214,"name":244,"severity":188,"cvss":186,"added":294,"epss":217,"published":388,"ranges":389,"checked":4,"hits":390,"covers":18},"2018-04-19T02:29:00.457",[49,70,88,92],[],{"cveId":224,"name":297,"severity":188,"cvss":186,"added":298,"epss":227,"published":392,"ranges":393,"checked":4,"hits":394,"covers":18},"2022-04-01T23:15:13.87",[95,99,102],[],{"cveId":202,"name":301,"severity":206,"cvss":205,"added":302,"epss":207,"published":396,"ranges":397,"checked":4,"hits":398,"covers":18},"2017-10-19T17:29:01.747",[49,70,83,88],[],{"cveId":209,"name":305,"severity":188,"cvss":186,"added":306,"epss":212,"published":400,"ranges":401,"checked":4,"hits":402,"covers":18},"2019-04-26T19:29:00.463",[49,70],[],{"cveId":229,"name":269,"severity":188,"cvss":186,"added":309,"epss":231,"published":404,"ranges":405,"checked":4,"hits":406,"covers":18},"2020-11-02T21:15:24.493",[49,70,95,99,102],[],{"cveId":183,"name":312,"severity":188,"cvss":186,"added":309,"epss":189,"published":408,"ranges":409,"checked":4,"hits":410,"covers":18},"2017-03-11T02:59:00.15",[49,70,83,88],[],{"cveId":315,"name":319,"severity":188,"cvss":186,"added":309,"epss":318,"published":412,"ranges":413,"checked":4,"hits":414,"covers":18},"2015-11-18T15:59:00.133",[49,63,70,78],[],{"cveId":197,"name":269,"severity":188,"cvss":186,"added":309,"epss":200,"published":416,"ranges":417,"checked":4,"hits":418,"covers":18},"2020-10-21T15:15:25.407",[49,70,95,99,102],[],{"cveId":324,"name":244,"severity":206,"cvss":326,"added":309,"epss":327,"published":420,"ranges":421,"checked":4,"hits":422,"covers":18},"2020-10-21T15:15:25.483",[49,70,95,99,102],[]]