Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability. CISA required action: Apply updates per vendor instructions.

WebLogic Server CVE-2020-14883

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-14883

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-14883
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3683 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:37 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerability being related to CVE-2020-14750. CISA required action: Apply updates per vendor instructions.

WebLogic Server CVE-2020-14882

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-14882

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-14882
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3682 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:36 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vulnerability is related to CVE-2020-14882. CISA required action: Apply updates per vendor instructions.

WebLogic Server CVE-2020-14750

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-14750

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-14750
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3680 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:35 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution. CISA required action: Apply updates per vendor instructions.

WebLogic Server CVE-2015-4852

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-4852

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-4852
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3679 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:34 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server, Injection

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). CISA required action: Apply updates per vendor instructions.

WebLogic Server CVE-2019-2725

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-2725

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-2725
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2936 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:37 GMT
Publisher date: Mon, 10 Jan 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.

WebLogic Server CVE-2017-10271

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-10271

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-10271
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2894 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:13 GMT
Publisher date: Thu, 10 Feb 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server. CISA required action: Apply updates per vendor instructions.

WebLogic Server CVE-2018-2628

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-2628

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-2628
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1440 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:36 GMT
Publisher date: Thu, 08 Sep 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server. CISA required action: Apply updates per vendor instructions.

WebLogic Server CVE-2023-21839

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-21839

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-21839
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1336 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:01:21 GMT
Publisher date: Mon, 01 May 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server OS Command Injection Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

WebLogic Server CVE-2017-3506

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-3506

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-3506
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1137 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:56:56 GMT
Publisher date: Mon, 03 Jun 2024 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

WebLogic Server CVE-2020-14644

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-14644

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-14644
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1079 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:55:33 GMT
Publisher date: Wed, 18 Sep 2024 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

WebLogic Server CVE-2020-2883

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-2883

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-2883
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1014 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:54:52 GMT
Publisher date: Tue, 07 Jan 2025 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

WebLogic Server CVE-2024-21182

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2024-21182

WebLogic Server

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2024-21182
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #152 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:41:43 GMT
Publisher date: Mon, 01 Jun 2026 00:00:00 GMT

Read the original announcement