Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

WebLogic

Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.

Official Site:

https://www.oracle.com/middleware/technologies/weblogic.html

Severity Summary:

Critical: 100 High: 117 Medium: 130 Low: 4
Reference
Title
Severity
CVE-2019-2827
WebLogic Vulnerability
Medium
CVE-2019-2824
WebLogic Vulnerability
Medium
CVE-2016-3445
WebLogic Vulnerability
Medium
CVE-2017-10178
WebLogic Vulnerability
Medium
CVE-2020-2544
WebLogic Vulnerability
Medium
CVE-2018-3248
WebLogic Vulnerability
Medium
CVE-2019-2395
WebLogic Vulnerability
Medium
CVE-2019-2887
WebLogic Vulnerability
Medium
CVE-2019-2888
WebLogic Vulnerability
Medium
CVE-2018-2902
WebLogic Vulnerability
Medium
CVE-2026-35291
WebLogic Improper Privilege Management Vulnerability
Medium
CVE-2018-2933
WebLogic Vulnerability
Medium
CVE-2016-0700
WebLogic Vulnerability
Medium
CVE-2018-2998
WebLogic Vulnerability
Medium
CVE-2018-2987
WebLogic Vulnerability
Medium
CVE-2019-2889
WebLogic Vulnerability
Medium
CVE-2018-3250
WebLogic Vulnerability
Medium
CVE-2026-34315
WebLogic Improper Authorization Vulnerability
Medium
CVE-2018-1313
WebLogic Vulnerability
Medium
CVE-2017-10334
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2025-61764
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2025-30753
WebLogic Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2018-2625
WebLogic Vulnerability
Medium
CVE-2020-2519
WebLogic Vulnerability
Medium
CVE-2025-50064
WebLogic Improper Privilege Management Vulnerability
Medium
CVE-2025-50072
WebLogic Improper Access Control Vulnerability
Medium
CVE-2019-2398
WebLogic Vulnerability
Medium
CVE-2019-2418
WebLogic Vulnerability
Medium
CVE-2025-50073
WebLogic Improper Authorization Vulnerability
Medium
CVE-2017-15707
WebLogic Improper Input Validation Vulnerability
Medium