Oracle Weblogic Server vulnerabilities
359 published vulnerabilities in Oracle Weblogic Server, 16 of them exploited in the wild. The most were published in 2020 (72), and 53 so far in 2026.
Oracle Weblogic Server vulnerabilities by year
2008
2010
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Oracle Weblogic Server vulnerabilities
- CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution
- CVE-2020-14750 Oracle WebLogic Server Remote Code Execution
- CVE-2020-14882 Oracle WebLogic Server Remote Code Execution
- CVE-2020-14644 Oracle WebLogic Server Remote Code Execution
- CVE-2020-2883 Oracle WebLogic Server Unspecified
- CVE-2020-2551 Oracle Fusion Middleware Unspecified
- CVE-2018-2628 Oracle WebLogic Server Unspecified
- CVE-2017-5638 Apache Struts Remote Code Execution
- CVE-2015-4852 Oracle WebLogic Server Deserialization of Untrusted Data
- CVE-2024-21182 Oracle WebLogic Server Unspecified
- CVE-2023-21839 Oracle WebLogic Server Unspecified
- CVE-2019-2725 Oracle WebLogic Server, Injection
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.