Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 78 High: 88 Medium: 123 Low: 4
Reference
Title
Severity
CVE-2016-0577
WebLogic Vulnerability
High
CVE-2016-3505
WebLogic Vulnerability
High
CVE-2016-0574
WebLogic Vulnerability
High
CVE-2016-0572
WebLogic Vulnerability
High
CVE-2018-1258
WebLogic Incorrect Authorization Vulnerability
High
CVE-2017-3506
WebLogic Vulnerability
High
CVE-2017-3531
WebLogic Vulnerability
High
CVE-2023-21996
WebLogic Vulnerability
High
CVE-2023-21931
WebLogic Vulnerability
High
CVE-2023-22108
WebLogic Vulnerability
High
CVE-2017-10147
WebLogic Vulnerability
High
CVE-2023-22086
WebLogic Vulnerability
High
CVE-2016-8610
WebLogic Uncontrolled Resource Consumption Vulnerability
High
CVE-2020-11987
WebLogic Server-Side Request Forgery (SSRF) Vulnerability
High
CVE-2023-21964
WebLogic Vulnerability
High
CVE-2017-10271
WebLogic Vulnerability
High
CVE-2019-10219
WebLogic Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-11023
WebLogic Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-24839
WebLogic Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2018-11771
WebLogic Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
Medium
CVE-2019-12400
WebLogic Improper Input Validation Vulnerability
Medium
CVE-2021-28170
WebLogic Improper Neutralization of Special Elements used in an Expression Language Statement (Expression La Vulnerability
Medium
CVE-2018-11039
WebLogic Vulnerability
Medium
CVE-2020-2934
WebLogic Vulnerability
Medium
CVE-2020-13956
WebLogic Vulnerability
Medium
CVE-2023-21960
WebLogic Vulnerability
Medium
CVE-2023-21956
WebLogic Vulnerability
Medium
CVE-2018-1324
WebLogic Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
Medium
CVE-2019-11358
WebLogic Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
Medium
CVE-2022-29577
WebLogic Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium