Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 95 High: 112 Medium: 130 Low: 4
Reference
Title
Severity
CVE-2020-14588
WebLogic Vulnerability
High
CVE-2019-17359
WebLogic Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2026-60201
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2020-2967
WebLogic Vulnerability
High
CVE-2018-1000180
WebLogic Use of a Broken or Risky Cryptographic Algorithm Vulnerability
High
CVE-2026-60203
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2020-14639
WebLogic Vulnerability
High
CVE-2025-21549
WebLogic Uncontrolled Resource Consumption Vulnerability
High
CVE-2023-21842
WebLogic Vulnerability
High
CVE-2024-20927
WebLogic Vulnerability
High
CVE-2026-60293
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2020-36518
WebLogic Out-of-bounds Write Vulnerability
High
CVE-2021-2351
WebLogic Use of a Broken or Risky Cryptographic Algorithm Vulnerability
High
CVE-2024-21234
WebLogic Vulnerability
High
CVE-2021-2109
WebLogic Vulnerability
High
CVE-2024-21274
WebLogic Vulnerability
High
CVE-2024-21260
WebLogic Vulnerability
High
CVE-2019-10086
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2026-35302
WebLogic URL Redirection to Untrusted Site (Open Redirect) Vulnerability
High
CVE-2026-46848
WebLogic Vulnerability
High
CVE-2026-35303
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2026-35311
WebLogic Improper Access Control Vulnerability
High
CVE-2026-35299
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2023-22101
WebLogic Vulnerability
High
CVE-2025-30762
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2025-61752
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2026-35259
WebLogic URL Redirection to Untrusted Site (Open Redirect) Vulnerability
High
CVE-2020-11987
WebLogic Server-Side Request Forgery (SSRF) Vulnerability
High
CVE-2026-34292
WebLogic Improper Access Control Vulnerability
High
CVE-2021-3450
WebLogic Improper Certificate Validation Vulnerability
High