Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 95 High: 112 Medium: 130 Low: 4
Reference
Title
Severity
CVE-2021-2135
WebLogic Vulnerability
Critical
CVE-2016-3510
WebLogic Vulnerability
Critical
CVE-2021-2047
WebLogic Vulnerability
Critical
CVE-2021-2064
WebLogic Vulnerability
Critical
CVE-2021-2108
WebLogic Vulnerability
Critical
CVE-2024-21216
WebLogic Vulnerability
Critical
CVE-2020-2883
WebLogic Vulnerability
Critical
CVE-2016-0638
WebLogic Vulnerability
Critical
CVE-2020-14750
WebLogic Vulnerability
Critical
CVE-2017-5638
WebLogic Improper Handling of Exceptional Conditions Vulnerability
Critical
CVE-2015-4852
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2023-22072
WebLogic Vulnerability
Critical
CVE-2023-22069
WebLogic Vulnerability
Critical
CVE-2016-3499
WebLogic Vulnerability
Critical
CVE-2016-3586
WebLogic Vulnerability
Critical
CVE-2019-17531
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2023-22089
WebLogic Vulnerability
Critical
CVE-2016-3551
WebLogic Vulnerability
Critical
CVE-2020-9548
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2016-5535
WebLogic Vulnerability
Critical
CVE-2020-9547
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2017-3248
WebLogic Vulnerability
Critical
CVE-2020-9546
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2017-10137
WebLogic Vulnerability
Critical
CVE-2024-21181
WebLogic Vulnerability
Critical
CVE-2022-23457
WebLogic Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Critical
CVE-2017-10352
WebLogic Vulnerability
Critical
CVE-2018-1000613
WebLogic Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) Vulnerability
Critical
CVE-2021-1994
WebLogic Vulnerability
Critical
CVE-2019-16943
WebLogic Deserialization of Untrusted Data Vulnerability
Critical