Skip to content
OpenAdvisories

Product · Oracle

WebLogic Server

191 known vulnerabilities.

WebLogic Server at a glance

Last 12 months
13
Critical · all time
37
Exploited · all time
11
Public exploit · all time
35

1 of the exploited vulnerabilities are known to be used by ransomware (CISA).

New vulnerabilities per month · last 12 months
0 10 20 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 13 vulnerabilities, 5 critical Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 2026135
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • Critical max 10.0
    NCSC-2026-0448 194 CVEs

    Kwetsbaarheden verholpen in Oracle Fusion Middleware

    Oracle heeft meerdere kwetsbaarheden verholpen in diverse producten, waaronder Oracle SOA Suite, Oracle WebLogic Server, Oracle Data Integrator, Oracle Identity Manager, Oracle Access Manager, Oracle WebCenter Content, Oracle Fusion Middleware (inclusief Heli…

    Oracle
  • Critical max 10.0
    NCSC-2026-0372 153 CVEs

    Kwetsbaarheden verholpen in Oracle Fusion Middleware

    Oracle heeft 153 kwetsbaarheden verholpen in diverse Oracle Fusion Middleware-producten, waaronder Helidon, Oracle Access Manager, Oracle Coherence, Oracle Data Integrator, Oracle Forms, Oracle Fusion Middleware Control, Oracle Identity Manager, Oracle Identi…

    Oracle
  • Critical max 10.0
    NCSC-2026-0306 262 CVEs

    Kwetsbaarheden verholpen in Oracle Fusion Middleware

    Oracle heeft 262 kwetsbaarheden verholpen in diverse Oracle producten, waaronder Oracle WebLogic Server, Oracle Identity Manager, Oracle WebCenter Portal, Oracle WebCenter Content, Oracle WebCenter Sites, Oracle WebCenter Enterprise Capture, Oracle Reports De…

    Oracle
  • High max 10.0
    NCSC-2026-0207 106 CVEs

    Kwetsbaarheden verholpen in Oracle Fusion Middleware producten

    Oracle heeft meerdere kwetsbaarheden verholpen in verschillende producten binnen de Oracle Fusion Middleware suite, waaronder WebLogic Server, WebCenter Content, WebCenter Sites, WebCenter Portal, WebCenter Enterprise Capture, Identity Manager, Identity Manag…

    Oracle
  • High max 10.0
    NCSC-2026-0027 28 CVEs 1 exploited

    Kwetsbaarheden verholpen in Oracle Fusion Middleware

    Oracle heeft kwetsbaarheden verholpen in verschillende producten, waaronder Oracle HTTP Server, Oracle WebLogic Server, en Oracle Fusion Middleware.

    Oracle
All Critical High Medium Low Exploited only Public exploit

191 results · Feed

  • High 7.9
    CVE-2026-46848

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • High 8.8
    CVE-2026-35311

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are…

    Oracle WebLogic Server
  • High 8.3
    CVE-2026-35302

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • High 8.8
    CVE-2026-35303

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • Critical 10.0
    CVE-2026-35301

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • High 8.8
    CVE-2026-35299

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2026-35300

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are…

    Oracle WebLogic Server
  • Critical 9.1
    CVE-2026-35298

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are…

    Oracle WebLogic Server
  • Critical 10.0
    CVE-2026-35292

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • Medium 6.6
    CVE-2026-35291

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • Critical 9.9
    CVE-2026-35263

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are…

    Oracle WebLogic Server
  • High 8.8
    CVE-2026-35259

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • High 8.7
    CVE-2026-35258

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that …

    Oracle WebLogic Server
  • High 7.5
    CVE-2024-21182 Exploited Public exploit EPSS 74%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV Jun 1, 2026
  • High 7.5
    CVE-2024-21183

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2024-21181

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2024-21175

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2024-21007

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2024-21006 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Medium 6.1
    CVE-2024-20986

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2024-20931 Public exploit EPSS 60%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 8.6
    CVE-2024-20927

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-22108

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 8.1
    CVE-2023-22101

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2023-22089

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-22086

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2023-22072

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). The supported versio…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2023-22069

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Medium 6.5
    CVE-2023-22040

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Medium 4.4
    CVE-2023-22031

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-21996

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-21979

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-21964

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Medium 5.6
    CVE-2023-21960

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Medium 6.1
    CVE-2023-21956

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-21931 Public exploit EPSS 82%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-21841

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-21842

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v…

    Oracle WebLogic Server
  • High 7.5
    CVE-2023-21839 Exploited Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV May 1, 2023
  • High 7.5
    CVE-2023-21837 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server