Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 95 High: 112 Medium: 130 Low: 4
Reference
Title
Severity
CVE-2022-23302
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2026-60312
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2024-21175
WebLogic Vulnerability
High
CVE-2026-60313
WebLogic Missing Authentication for Critical Function Vulnerability
High
CVE-2020-10672
WebLogic Other Vulnerability
High
CVE-2022-23307
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2023-21979
WebLogic Vulnerability
High
CVE-2016-8610
WebLogic Uncontrolled Resource Consumption Vulnerability
High
CVE-2023-21964
WebLogic Vulnerability
High
CVE-2023-21931
WebLogic Vulnerability
High
CVE-2023-21996
WebLogic Vulnerability
High
CVE-2020-11113
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2026-35258
WebLogic URL Redirection to Untrusted Site (Open Redirect) Vulnerability
High
CVE-2023-22108
WebLogic Vulnerability
High
CVE-2023-22086
WebLogic Vulnerability
High
CVE-2026-60527
WebLogic Improper Access Control Vulnerability
High
CVE-2020-14883
WebLogic Vulnerability
High
CVE-2020-5398
WebLogic Download of Code Without Integrity Check Vulnerability
High
CVE-2020-11112
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2019-2650
WebLogic Vulnerability
High
CVE-2019-2649
WebLogic Vulnerability
High
CVE-2008-2579
WebLogic Vulnerability
High
CVE-2019-2647
WebLogic Vulnerability
High
CVE-2022-21292
WebLogic Vulnerability
High
CVE-2017-10271
WebLogic Vulnerability
High
CVE-2020-11620
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2020-11619
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2020-11111
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2017-3531
WebLogic Vulnerability
High
CVE-2020-10969
WebLogic Deserialization of Untrusted Data Vulnerability
High