Skip to main content

WebLogic Server vulnerabilities

2 published alerts for Oracle WebLogic Server.

Actively exploited (KEV)Ransomware

CVE-2017-10271

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2017-10271). Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. CISA remediation due date: 2022-08-10. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2019-2725

Oracle WebLogic Server, Injection vulnerability

Oracle WebLogic Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2019-2725). Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). CISA remediation due date: 2022-07-10. If you need help checking exposure, call (864) 335-9223.