Products
Databases
Oracle WebLogic / Java SE
- Last 30 days
- 0
- Actively exploited (KEV)
- 2
- All CVEs
- 39
Latest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-21183 | 7.5High |
Oracle WebLogic Serveroracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenti…
|
0.44% |
2024-07-17
28 mo ago
|
| CVE-2024-21181 | 9.8Critical |
Oracle WebLogic Serveroracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenti…
|
1.11% |
2024-07-17
28 mo ago
|
| CVE-2024-21147 | 7.4High |
Oracle Java SE JDK and JREoracle graalvm_enterprise_editionoracle graalvm_for_jdk
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf,…
|
1.12% |
2024-07-17
28 mo ago
|
| CVE-2024-21140 | 4.8Medium |
Oracle Java SE JDK and JREoracle java_seoracle jdk
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf,…
|
0.94% |
2024-07-17
28 mo ago
|
| CVE-2024-20931 | 7.5High |
Oracle WebLogic Serveroracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenti…
|
59.67% |
2024-02-17
33 mo ago
|
| CVE-2024-20927 | 8.6High |
Oracle WebLogic Serveroracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenti…
|
0.5% |
2024-02-17
33 mo ago
|
| CVE-2023-22108 | 7.5High |
Oracle WebLogic Serveroracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenti…
|
0.67% |
2023-10-18
37 mo ago
|
| CVE-2021-35578 | 5.3Medium |
Oracle Java SE JDK and JREoracle graalvm_enterprise_editionoracle java_se
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.…
|
6.67% |
2021-10-20
61 mo ago
|
| CVE-2021-35560 | 7.5High |
Oracle Java SE JDK and JREoracle java_se
Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u301. Difficult to exploit vulnerability allows unauthenticated attacker with network a…
|
4.83% |
2021-10-20
61 mo ago
|
| CVE-2021-35559 | 5.3Medium |
Oracle Java SE JDK and JREoracle java_seoracle jdk
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Editio…
|
15.9% |
2021-10-20
61 mo ago
|
| CVE-2020-36179 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.
|
17.06% |
2021-01-07
71 mo ago
|
| CVE-2020-36180 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.
|
4.09% |
2021-01-07
71 mo ago
|
| CVE-2020-36182 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.
|
4.09% |
2021-01-07
71 mo ago
|
| CVE-2020-36184 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.
|
8.35% |
2021-01-07
71 mo ago
|
| CVE-2020-36181 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
|
4.09% |
2021-01-07
71 mo ago
|
|
CVE-2020-14644
KEV
|
9.8Critical |
Oracle WebLogic Serveroracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows …
|
94.54% |
2020-07-15
76 mo ago
|
| CVE-2020-11111 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms…
|
3.6% |
2020-03-31
80 mo ago
|
| CVE-2020-11112 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
|
3.67% |
2020-03-31
80 mo ago
|
| CVE-2020-11113 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
|
6.27% |
2020-03-31
80 mo ago
|
| CVE-2020-10968 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
|
3.65% |
2020-03-26
80 mo ago
|
| CVE-2020-10969 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
|
3.58% |
2020-03-26
80 mo ago
|
| CVE-2020-10672 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.j…
|
3.05% |
2020-03-19
80 mo ago
|
| CVE-2020-10673 | 8.8High |
Debian debian_linuxFasterXML jackson-databindNETAPP steelstore_cloud_integrated_storage
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
|
8.02% |
2020-03-19
80 mo ago
|
|
CVE-2017-3506
KEV
|
7.4High |
Oracle WebLogic Serveroracle WebLogic Server
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to …
|
95.99% |
2017-04-24
116 mo ago
|
| CVE-2017-3253 | Not scored |
oracle JRockitoracle Java SE Embeddedoracle java_se
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.1…
|
3.86% |
2017-01-28
119 mo ago
|
| CVE-2017-3259 | Not scored |
oracle java_se
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated at…
|
2.16% |
2017-01-28
119 mo ago
|
| CVE-2017-3260 | Not scored |
oracle java_se
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with ne…
|
2% |
2017-01-28
119 mo ago
|
| CVE-2017-3262 | Not scored |
oracle java_se
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker w…
|
2.11% |
2017-01-28
119 mo ago
|
| CVE-2017-3272 | Not scored |
oracle Java SE Embeddedoracle java_se
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable…
|
2.99% |
2017-01-28
119 mo ago
|
| CVE-2017-3289 | Not scored |
oracle Java SE Embeddedoracle java_se
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerab…
|
2.46% |
2017-01-28
119 mo ago
|