Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 79 High: 92 Medium: 128 Low: 4
Reference
Title
Severity
CVE-2008-3257
WebLogic Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Critical
CVE-2021-2394
WebLogic Vulnerability
Critical
CVE-2021-2382
WebLogic Vulnerability
Critical
CVE-2019-14540
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2019-16335
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2019-16942
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2019-17267
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2021-2136
WebLogic Vulnerability
Critical
CVE-2021-2064
WebLogic Vulnerability
Critical
CVE-2021-2135
WebLogic Vulnerability
Critical
CVE-2021-2075
WebLogic Vulnerability
Critical
CVE-2020-14882
WebLogic Vulnerability
Critical
CVE-2019-16943
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2019-17531
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2020-14859
WebLogic Vulnerability
Critical
CVE-2021-1994
WebLogic Vulnerability
Critical
CVE-2020-14841
WebLogic Vulnerability
Critical
CVE-2020-14825
WebLogic Vulnerability
Critical
CVE-2021-2047
WebLogic Vulnerability
Critical
CVE-2018-3197
WebLogic Vulnerability
Critical
CVE-2017-10352
WebLogic Vulnerability
Critical
CVE-2019-2729
WebLogic Improper Access Control Vulnerability
Critical
CVE-2020-9547
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2023-22069
WebLogic Vulnerability
Critical
CVE-2023-22072
WebLogic Vulnerability
Critical
CVE-2024-21181
WebLogic Vulnerability
Critical
CVE-2022-23457
WebLogic Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Critical
CVE-2015-4852
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2020-2546
WebLogic Vulnerability
Critical
CVE-2019-2646
WebLogic Vulnerability
Critical