Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 95 High: 112 Medium: 130 Low: 4
Reference
Title
Severity
CVE-2021-21350
WebLogic Vulnerability
Critical
CVE-2018-3245
WebLogic Deserialization of Untrusted Data Vulnerability
Critical
CVE-2018-3197
WebLogic Vulnerability
Critical
CVE-2018-3201
WebLogic Vulnerability
Critical
CVE-2025-21535
WebLogic Missing Authentication for Critical Function Vulnerability
Critical
CVE-2026-34305
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2021-4104
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2024-21183
WebLogic Vulnerability
High
CVE-2020-5258
WebLogic Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
High
CVE-2026-60207
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2018-15756
WebLogic Vulnerability
High
CVE-2022-21441
WebLogic Vulnerability
High
CVE-2020-28491
WebLogic Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2024-21182
WebLogic Vulnerability
High
CVE-2023-21838
WebLogic Vulnerability
High
CVE-2024-21006
WebLogic Vulnerability
High
CVE-2023-21841
WebLogic Vulnerability
High
CVE-2023-21837
WebLogic Vulnerability
High
CVE-2023-21839
WebLogic Vulnerability
High
CVE-2024-20931
WebLogic Vulnerability
High
CVE-2020-14589
WebLogic Vulnerability
High
CVE-2020-7226
WebLogic Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2020-14820
WebLogic Vulnerability
High
CVE-2026-60528
WebLogic Improper Access Control Vulnerability
High
CVE-2021-40690
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2026-60529
WebLogic Improper Access Control Vulnerability
High
CVE-2026-60153
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2026-60196
WebLogic Improper Access Control Vulnerability
High
CVE-2020-10673
WebLogic Other Vulnerability
High
CVE-2024-21007
WebLogic Missing Authentication for Critical Function Vulnerability
High