Class familyOracle · WebLogic Server
Oracle WebLogic Server missing authentication flaws, 2017–2026
46 WebLogic Server CVEs with CWE-306 weaknesses, 19 Oct 2017 to 20 Oct 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2017’17
2018’18
2019’19
2020’20
2021’21
2022’22
8 2023’23
3 2024’24
3 2025’25
31 2026’26
In CISA KEVNot in KEV
20171 CVE, 1 in KEV
20238 CVEs, 1 in KEV
20243 CVEs
20253 CVEs
202631 CVEs
- CVE-2026-35292
- CVE-2026-35299
- CVE-2026-35301
- CVE-2026-35303
- CVE-2026-60153
- CVE-2026-60198
- CVE-2026-60199
- CVE-2026-60200
- CVE-2026-60201
- CVE-2026-60202
- CVE-2026-60203
- CVE-2026-60204
- CVE-2026-60205
- CVE-2026-60206
- CVE-2026-60207
- CVE-2026-60291
- CVE-2026-60292
- CVE-2026-60294
- CVE-2026-60312
- CVE-2026-60313
- CVE-2026-60672
- CVE-2026-60696
- CVE-2026-60698
- CVE-2026-70748
- CVE-2026-70756
- CVE-2026-70757
- CVE-2026-83021
- CVE-2026-83399
- CVE-2026-87302
- CVE-2026-91323
- CVE-2026-91502
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2017-10271KEV | 19 Oct 2017 | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability | Grouped by weakness | 84.4 |
| CVE-2023-21837 | 17 Jan 2023 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 22.5 |
| CVE-2023-21842 | 17 Jan 2023 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container) | Grouped by weakness | 16.3 |
| CVE-2023-21839KEV | 18 Jan 2023 | Oracle WebLogic Server Unspecified Vulnerability | Grouped by weakness | 72.1 |
| CVE-2023-21931 | 18 Apr 2023 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 30.2 |
| CVE-2023-21979 | 18 Apr 2023 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.3 |
| CVE-2023-22069 | 17 Oct 2023 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 65.0 |
| CVE-2023-22072 | 17 Oct 2023 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 17.8 |
| CVE-2023-22101 | 17 Oct 2023 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2024-21006 | 16 Apr 2024 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 29.2 |
| CVE-2024-21007 | 16 Apr 2024 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2024-21183 | 16 Jul 2024 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 12.9 |
| CVE-2025-21535 | 21 Jan 2025 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 63.3 |
| CVE-2025-30762 | 15 Jul 2025 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 13.2 |
| CVE-2025-61752 | 21 Oct 2025 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 12.0 |
| CVE-2026-35292 | 16 Jun 2026 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) | Grouped by weakness | 15.3 |
| CVE-2026-35299 | 16 Jun 2026 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) | Grouped by weakness | 13.2 |
| CVE-2026-35301 | 16 Jun 2026 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) | Grouped by weakness | 15.3 |
| CVE-2026-35303 | 16 Jun 2026 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) | Grouped by weakness | 13.2 |
| CVE-2026-60153 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console) | Grouped by weakness | 13.4 |
| CVE-2026-60198 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60199 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60200 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60201 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 12.3 |
| CVE-2026-60202 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60203 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 13.6 |
| CVE-2026-60204 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60205 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60206 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 19.4 |
| CVE-2026-60207 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 13.7 |
| CVE-2026-60291 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60292 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60294 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60312 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 12.3 |
| CVE-2026-60313 | 21 Jul 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 13.7 |
| CVE-2026-60672 | 18 Aug 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60696 | 18 Aug 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-60698 | 18 Aug 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-70748 | 15 Sep 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 20.5 |
| CVE-2026-70756 | 15 Sep 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-70757 | 15 Sep 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-83021 | 15 Sep 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container) | Grouped by weakness | 15.7 |
| CVE-2026-83399 | 20 Oct 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 17.3 |
| CVE-2026-87302 | 20 Oct 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 15.5 |
| CVE-2026-91323 | 20 Oct 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 17.3 |
| CVE-2026-91502 | 20 Oct 2026 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) | Grouped by weakness | 9.4 |