Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 95 High: 112 Medium: 130 Low: 4
Reference
Title
Severity
CVE-2016-5531
WebLogic Vulnerability
Critical
CVE-2018-2894
WebLogic Vulnerability
Critical
CVE-2026-60292
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-35292
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-35301
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2019-2645
WebLogic Vulnerability
Critical
CVE-2019-2646
WebLogic Vulnerability
Critical
CVE-2026-35300
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2019-2725
WebLogic Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability
Critical
CVE-2019-2729
WebLogic Improper Access Control Vulnerability
Critical
CVE-2026-35263
WebLogic Improper Access Control Vulnerability
Critical
CVE-2019-2856
WebLogic Vulnerability
Critical
CVE-2026-60294
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60291
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2018-3252
WebLogic Vulnerability
Critical
CVE-2026-60208
WebLogic Uncontrolled Resource Consumption Vulnerability
Critical
CVE-2020-2546
WebLogic Vulnerability
Critical
CVE-2026-60206
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60205
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60204
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2020-2551
WebLogic Vulnerability
Critical
CVE-2026-60202
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60200
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60199
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60198
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2020-2884
WebLogic Vulnerability
Critical
CVE-2026-35298
WebLogic Improper Access Control Vulnerability
Critical
CVE-2019-2658
WebLogic Vulnerability
Critical
CVE-2021-21347
WebLogic Unrestricted Upload of File with Dangerous Type Vulnerability
Critical
CVE-2018-3191
WebLogic Vulnerability
Critical