Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 95 High: 112 Medium: 130 Low: 4
Reference
Title
Severity
CVE-2020-10968
WebLogic Deserialization of Untrusted Data Vulnerability
High
CVE-2018-11040
WebLogic Inclusion of Functionality from Untrusted Control Sphere Vulnerability
High
CVE-2018-3246
WebLogic Vulnerability
High
CVE-2018-2935
WebLogic Vulnerability
High
CVE-2022-21371
WebLogic Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2018-3213
WebLogic Vulnerability
High
CVE-2021-2157
WebLogic Vulnerability
High
CVE-2017-10147
WebLogic Vulnerability
High
CVE-2019-2648
WebLogic Vulnerability
High
CVE-2019-2890
WebLogic Vulnerability
High
CVE-2021-35620
WebLogic Vulnerability
High
CVE-2020-2963
WebLogic Vulnerability
High
CVE-2016-3505
WebLogic Vulnerability
High
CVE-2020-2867
WebLogic Vulnerability
High
CVE-2016-0577
WebLogic Vulnerability
High
CVE-2020-2828
WebLogic Vulnerability
High
CVE-2021-2376
WebLogic Vulnerability
High
CVE-2021-2378
WebLogic Vulnerability
High
CVE-2016-0574
WebLogic Vulnerability
High
CVE-2020-2798
WebLogic Vulnerability
High
CVE-2016-0573
WebLogic Vulnerability
High
CVE-2016-0572
WebLogic Vulnerability
High
CVE-2018-1258
WebLogic Incorrect Authorization Vulnerability
High
CVE-2019-2891
WebLogic Vulnerability
High
CVE-2021-2018
WebLogic Vulnerability
High
CVE-2017-3506
WebLogic Vulnerability
High
CVE-2020-2549
WebLogic Vulnerability
High
CVE-2018-1313
WebLogic Vulnerability
Medium
CVE-2017-10123
WebLogic Vulnerability
Medium
CVE-2018-2998
WebLogic Vulnerability
Medium