Sploitus

63 exploited vulnerabilities in Oracle Weblogic Server

Showing 1–50 of 63, highest-scoring first

Vendors
Oracle, Centos, Linux Mint, Apache, Red Hat, Suse
With known exploits
63
Affected Oracle Weblogic Server versions
= 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0, 12.2.1.0.0, 10.3, 14.1.2.0.0, 15.1.1.0.0, 12.2.1.1.0, 12.2.1.2.0, 12.2.1.3, 12.1.2.0.0
Affected Apache log4j versions
≤ 1.2.17
Affected Oracle Communications Diameter Signaling Router versions
= 8.0, 8.1, 8.2, 8.2.1
Affected Oracle Communications Network Integrity versions
≤ 7.3.6
Affected Oracle Hyperion Infrastructure Technology versions
= 11.1.2.4, 11.2.5.0
Affected Oracle Identity Manager versions
= 11.1.2.3.0, 12.2.1.3.0
Affected Oracle Peoplesoft Enterprise Peopletools versions
= 8.56, 8.57, 8.58
Affected Oracle Rapid Planning versions
= 12.1, 12.2

Vulnerabilities with exploits

Highest CVSS first — 38 of these already have exploit code on Sploitus

CVE-2021-2394 3 exploits
CVSS 10.0 CRITICAL 2021-07-20
Exploit for CVE-2021-2394Exploit for CVE-2021-2394
CVE-2020-14882 42 exploits
CVSS 10.0 CRITICAL 2020-10-21FIX AVAILABLE
Exploit for CVE-2020-14882Exploit for CVE-2020-14882
CVE-2020-14750 9 exploits
CVSS 10.0 CRITICAL 2020-11-01FIX AVAILABLE
Exploit for CVE-2020-14882Exploit for Authentication Bypass Using an Alternate Path or Channel in Solarwinds Orion_Platform
CVE-2020-14645 3 exploits
CVSS 10.0 CRITICAL 2020-07-15
Exploit for CVE-2020-14645Exploit for CVE-2020-14644
CVE-2020-2883 12 exploits
CVSS 10.0 CRITICAL 2020-04-15FIX AVAILABLE
📄 Oracle Access Manager Unauthenticated Remote Code ExecutionVulmap - Web Vulnerability Scanning And Verification Tools
CVE-2020-2551 19 exploits
CVSS 10.0 CRITICAL 2020-01-14
Exploit for CVE-2020-2551Exploit for CVE-2021-2394
CVE-2019-17571 3 exploits
CVSS 10.0 CRITICAL 2017-08-07FIX AVAILABLE
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_FirmwareExploit for Deserialization of Untrusted Data in Apache Log4J
CVE-2019-2729 11 exploits
CVSS 10.0 CRITICAL 2019-06-18FIX AVAILABLE
Exploit for Improper Access Control in Oracle Communications_Diameter_Signaling_RouterExploit for Improper Access Control in Oracle Communications_Diameter_Signaling_Router
CVE-2016-3510 7 exploits
CVSS 10.0 CRITICAL 2016-07-21
Exploit for Deserialization of Untrusted Data in Ibm Sterling_B2B_IntegratorExploit for Code Injection in Microsoft
CVE-2008-3257 10 exploits
CVSS 10.0 HIGH 2008-07-22FIX AVAILABLE
Oracle Weblogic Apache Connector POST Request Buffer OverflowOracle Weblogic Apache Connector - POST Buffer Overflow (Metasploit)
CVE-2019-2725 35 exploits
CVSS 10.0 CRITICAL 2007-04-10FIX AVAILABLE
Exploit for Injection in Oracle Agile_PlmExploit for CVE-2014-7911
CVE-2018-3252
CVSS 10.0 CRITICAL 2007-04-10
CVE-2018-3245 3 exploits
CVSS 10.0 CRITICAL 2007-04-10
Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass) ExploitOracle Weblogic Server Deserialization Remote Command Execution
CVE-2018-3191
CVSS 10.0 CRITICAL 2007-04-10
CVE-2026-60206 1 exploit
CVSS 9.9 CRITICAL 2026-07-21
Exploit for CVE-2026-60206
CVE-2017-10352
CVSS 9.9 CRITICAL 2017-10-19
CVE-2021-1994
CVSS 9.8 CRITICAL 2021-01-19FIX AVAILABLE
CVE-2020-9546
CVSS 9.8 CRITICAL 2020-02-10
CVE-2020-2546 1 exploit
CVSS 9.8 CRITICAL 2020-01-14
Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform
CVE-2018-2628 69 exploits
CVSS 9.8 CRITICAL 2018-04-17
Nessus-CVE-POC-FinderExploit for Deserialization of Untrusted Data in Oracle Weblogic_Server
CVE-2017-3248 16 exploits
CVSS 9.8 CRITICAL 2017-01-24FIX AVAILABLE
Nessus-CVE-POC-FinderExploit for Code Injection in Microsoft
CVE-2016-0638 3 exploits
CVSS 9.8 CRITICAL 2016-04-21
Exploit for Code Injection in MicrosoftExploit for Code Injection in Microsoft
CVE-2015-4852 18 exploits
CVSS 9.8 CRITICAL 2015-11-18
Nessus-CVE-POC-FinderOracle Weblogic Server Deserialization RCE - Raw Object (Metasploit)
CVE-2009-3555 15 exploits
CVSS 9.8 CRITICAL 1970-01-01FIX AVAILABLE
metasploitable-vulnerability-mapping-with-nmapExploit for Improper Certificate Validation in Apache Http_Server
CVE-2018-2894 8 exploits
CVSS 9.8 CRITICAL 2007-04-10
Exploit for CVE-2018-2894Vulmap - Web Vulnerability Scanning And Verification Tools
CVE-2018-2893 15 exploits
CVSS 9.8 CRITICAL 2007-04-10
Exploit for Improper Input Validation in Joomla Joomla\!Exploit for Code Injection in Microsoft
CVE-2021-2109 6 exploits
CVSS 9.0 HIGH 2021-01-19
Exploit for CVE-2021-2109Exploit for CVE-2021-2109
CVE-2020-14883 8 exploits
CVSS 9.0 HIGH 2020-10-21FIX AVAILABLE
Exploit for CVE-2020-14882Exploit for CVE-2020-14883
CVE-2017-10147
CVSS 8.6 HIGH 2017-08-08
CVE-2019-2618 2 exploits
CVSS 8.5 HIGH 2019-04-16FIX AVAILABLE
Exploit for Code Injection in Pivotal_Software Spring_Data_CommonsExploit for CVE-2019-2618
CVE-2024-20931 2 exploits
CVSS 7.8 HIGH 2023-01-18FIX AVAILABLE
Exploit for Improper Access Control in Oracle Weblogic_ServerExploit for Improper Access Control in Oracle Weblogic_Server
CVE-2024-21182 3 exploits
CVSS 7.8 HIGH 2023-12-07FIX AVAILABLE
Exploit for CVE-2024-21182Exploit for CVE-2024-21182
CVE-2024-21006 1 exploit
CVSS 7.8 HIGH 2023-12-07FIX AVAILABLE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
CVE-2023-21931 3 exploits
CVSS 7.8 HIGH 2023-04-18FIX AVAILABLE
Exploit for Cross-site Scripting in Helpsystems Cobalt_StrikeOracle Weblogic PreAuth Remote Command Execution Exploit
CVE-2023-21839 10 exploits
CVSS 7.8 HIGH 2023-01-17FIX AVAILABLE
Vulhub-vulnerability-reproduction-reportsExploit for Improper Access Control in Oracle Weblogic_Server
CVE-2022-29546
CVSS 7.8 HIGH 2022-04-25
CVE-2022-21371 5 exploits
CVSS 7.8 HIGH 2022-01-18
Exploit for Path Traversal in Oracle Weblogic_ServerExploit for Path Traversal in Oracle Weblogic_Server
CVE-2019-2615
CVSS 7.8 HIGH 2019-04-16
CVE-2018-3213
CVSS 7.8 HIGH 2018-10-16FIX AVAILABLE
CVE-2020-5258
CVSS 7.7 HIGH 2020-03-10FIX AVAILABLE
CVE-2017-10271 47 exploits
CVSS 7.5 HIGH 2017-10-17
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server📄 Oracle WebLogic WLS-WSAT XMLDecoder Remote Code Execution
CVE-2016-8610 1 exploit
CVSS 7.5 HIGH 2016-10-24
Exploit for Uncontrolled Resource Consumption in Openssl
CVE-2014-0114 5 exploits
CVSS 7.5 HIGH 2014-04-30
OSCAR EMR 15.21beta361 XSS / Disclosure / CSRF / Insecure Direct Object ReferenceApache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution Exploit
CVE-2013-2186
CVSS 7.5 HIGH 2013-10-28FIX AVAILABLE
CVE-2018-1000180
CVSS 7.5 HIGH 2007-04-10FIX AVAILABLE
CVE-2017-3506 10 exploits
CVSS 7.4 HIGH 2017-04-24
Exploit for Improper Input Validation in Joomla Joomla\!Vulmap - Web Vulnerability Scanning And Verification Tools
CVE-2019-2890 9 exploits
CVSS 7.2 HIGH 2019-10-15
Exploit for CVE-2019-2888Exploit for Code Injection in Microsoft
CVE-2020-11022 6 exploits
CVSS 6.9 MEDIUM 2020-04-29FIX AVAILABLE
Exploit for Cross-site Scripting in JqueryExploit for Cross-site Scripting in Jquery
CVE-2020-11023 5 exploits
CVSS 6.9 MEDIUM 2020-04-29FIX AVAILABLE
Exploit for Cross-site Scripting in JqueryExploit for Cross-site Scripting in Jquery
CVE-2009-1975 1 exploit
CVSS 6.8 MEDIUM 2009-07-14
Oracle WebLogic Server 10.3 - 'console-help.portal' Cross-Site Scripting