Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

362 records

Vendor: Oracle Component: Weblogic Server Clear all filters
TI-2026-77143 CVE-2026-87302 · GHSA-rf3w-ww37-5mcp

Improper authentication in Oracle WebLogic Server Core

Priority MEDIUM 48

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00437 Published 2026-10-20 No fix listed CWE-287
TI-2026-77827 CVE-2026-101515 · GHSA-9pqc-cp6x-29v5

Sensitive information exposure in Oracle WebLogic Server

Priority LOW 26

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00331 Published 2026-10-20 No fix listed CWE-200
TI-2026-57279 CVE-2026-83038 · GHSA-vv3j-hh67-rj4f

Improper access control in Oracle WebLogic Server

Priority MEDIUM 43

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-09-15 No fix listed CWE-284
TI-2026-57262 CVE-2026-83021 · GHSA-g2wh-mcrv-5m76

Improper authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-49452 CVE-2026-70757 · GHSA-49v7-8ppc-2g98

Improper authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-49451 CVE-2026-70756 · GHSA-qx4v-9wjm-r797

Improper authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-49443 CVE-2026-70748 · GHSA-cmxr-46w4-7j9h

Improper authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-43621 CVE-2026-60977 · GHSA-pjw3-w34w-wr99

Improper access control in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-43365 CVE-2026-60702 · GHSA-jfhf-mpqc-2q82

Improper access control in Oracle WebLogic Server

Priority MEDIUM 43

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284
TI-2026-43362 CVE-2026-60699 · GHSA-xj3r-cc65-cwvx

Improper access control in Oracle WebLogic Server

Priority MEDIUM 43

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-08-18 No fix listed CWE-284
TI-2026-43361 CVE-2026-60698 · GHSA-jp2g-pj9f-7m2r

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-306
TI-2026-43359 CVE-2026-60696 · GHSA-wvwm-7qqm-r7hc

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-306
TI-2026-43343 CVE-2026-60680 · GHSA-85g2-x595-86wm

Improper access control in Oracle WebLogic Server

Priority LOW 37

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0038 Published 2026-08-18 No fix listed CWE-284
TI-2026-43342 CVE-2026-60679 · GHSA-jr33-62v4-49wc

Improper authentication in Oracle WebLogic Server

Priority LOW 35

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00334 Published 2026-08-18 No fix listed CWE-287
TI-2026-43335 CVE-2026-60672 · GHSA-3j68-w34w-39gr

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-306
TI-2026-43114 CVE-2026-60415 · GHSA-pqc7-w39c-x36g

Information disclosure in Oracle WebLogic Server

Priority LOW 38

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00424 Published 2026-08-18 No fix listed CWE-200
TI-2026-43194 CVE-2026-60529 · GHSA-xvqh-pg75-hr4f

Improper access control in Oracle WebLogic Server

Priority LOW 34

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-284
TI-2026-43193 CVE-2026-60528 · GHSA-ch59-3g4r-2xv7

Improper access control in Oracle WebLogic Server

Priority LOW 35

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00314 Published 2026-07-21 No fix listed CWE-284
TI-2026-43192 CVE-2026-60527 · GHSA-c9jp-cw45-rgmv

Improper access control in Oracle WebLogic Server

Priority LOW 32

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00182 Published 2026-07-21 No fix listed CWE-284
TI-2026-43043 CVE-2026-60343 · GHSA-9hm6-79cm-xrr8

Improper access control in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284
TI-2026-43014 CVE-2026-60313 · GHSA-w26r-7wrh-3r44

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-306
TI-2026-43013 CVE-2026-60312 · GHSA-2j2f-pqxr-xr4h

Missing authentication in Oracle WebLogic Server

Priority LOW 37

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-306
TI-2026-42995 CVE-2026-60294 · GHSA-gfvr-mx87-vw5j

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42994 CVE-2026-60293 · GHSA-4p6j-5j8j-4f72

Information disclosure in Oracle WebLogic Server

Priority MEDIUM 44

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00437 Published 2026-07-21 No fix listed CWE-200
Load more