Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 100 High: 117 Medium: 130 Low: 4
Reference
Title
Severity
CVE-2026-60202
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-35298
WebLogic Improper Access Control Vulnerability
Critical
CVE-2026-60696
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60698
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60702
WebLogic Improper Access Control Vulnerability
Critical
CVE-2026-35292
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60200
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-60977
WebLogic Vulnerability
Critical
CVE-2018-3191
WebLogic Vulnerability
Critical
CVE-2018-3197
WebLogic Vulnerability
Critical
CVE-2023-21842
WebLogic Vulnerability
High
CVE-2026-60196
WebLogic Improper Access Control Vulnerability
High
CVE-2023-21839
WebLogic Vulnerability
High
CVE-2022-23307
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2021-3450
WebLogic Improper Certificate Validation Vulnerability
High
CVE-2026-60201
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2023-21837
WebLogic Vulnerability
High
CVE-2022-23302
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2025-61752
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2022-21441
WebLogic Vulnerability
High
CVE-2023-21841
WebLogic Vulnerability
High
CVE-2026-60343
WebLogic Improper Access Control Vulnerability
High
CVE-2020-2967
WebLogic Vulnerability
High
CVE-2026-60679
WebLogic Improper Authentication Vulnerability
High
CVE-2026-60680
WebLogic Improper Access Control Vulnerability
High
CVE-2026-60699
WebLogic Improper Access Control Vulnerability
High
CVE-2020-14639
WebLogic Vulnerability
High
CVE-2020-14589
WebLogic Vulnerability
High
CVE-2020-14588
WebLogic Vulnerability
High
CVE-2020-7226
WebLogic Allocation of Resources Without Limits or Throttling Vulnerability
High