Home › Oracle

Oracle WebLogic Server: known exploited vulnerabilities

Entries12

Ransomware-linked2

First added2021-11-03

Latest2026-06-01

EPSS compared

CVE-2020-1488299.9%

CVE-2017-1027199.9%

CVE-2019-272599.9%

CVE-2018-262899.9%

CVE-2023-2183999.9%

CVE-2020-1475099.2%

CVE-2020-1488397.9%

CVE-2017-350696.2%

CVE-2015-485296.0%

CVE-2020-288394.9%

CVE-2020-1464494.5%

CVE-2024-2118274.1%

CVE	Vendor / product	Added	EPSS	Ransomware
CVE-2024-21182	Oracle WebLogic Server	2026-06-01	74.1%	Unknown
CVE-2020-2883	Oracle WebLogic Server	2025-01-07	94.9%	Unknown
CVE-2020-14644	Oracle WebLogic Server	2024-09-18	94.5%	Unknown
CVE-2017-3506	Oracle WebLogic Server	2024-06-03	96.2%	Unknown
CVE-2023-21839	Oracle WebLogic Server	2023-05-01	99.9%	Unknown
CVE-2018-2628	Oracle WebLogic Server	2022-09-08	99.9%	Unknown
CVE-2017-10271	Oracle WebLogic Server	2022-02-10	99.9%	Known
CVE-2019-2725	Oracle WebLogic Server	2022-01-10	99.9%	Known
CVE-2020-14883	Oracle WebLogic Server	2021-11-03	97.9%	Unknown
CVE-2020-14882	Oracle WebLogic Server	2021-11-03	99.9%	Unknown
CVE-2020-14750	Oracle WebLogic Server	2021-11-03	99.2%	Unknown
CVE-2015-4852	Oracle WebLogic Server	2021-11-03	96.0%	Unknown

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.