Product by Oracle
Weblogic Server Proxy Plug-in
16 known vulnerabilities in Weblogic Server Proxy Plug-in (Oracle), 1 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability In CISA KEValso in 3 other products | 10.0 | |
| High | CVE-2020-5360 | Dell BSAFE Micro Edition Suite: Buffer Under-read | 7.5 | |
| Critical | CVE-2026-60364 | Oracle Weblogic Server Proxy Plug-in: security vulnerability | 9.8 | |
| Critical | CVE-2026-60365 | Oracle Weblogic Server Proxy Plug-in: security vulnerability | 10.0 | |
| Critical | CVE-2020-35169 | Dell BSAFE Crypto-C Micro Edition: Improper Verification of Cryptographic Signature | 9.1 | |
| High | CVE-2020-26185 | Dell BSAFE Micro Edition Suite: Improper Input Validation | 7.5 | |
| Critical | CVE-2020-29506 | Dell BSAFE Crypto-C Micro Edition: Covert Timing Channel | 6.8 | |
| Medium | CVE-2020-5359 | Dell BSAFE Micro Edition Suite: Missing Standardized Error Handling Mechanism | 5.8 | |
| Critical | CVE-2020-29508 | Dell BSAFE Micro Edition Suite: Insufficient Entropy | 5.3 | |
| Critical | CVE-2020-29507 | Dell BSAFE Crypto-C Micro Edition: Improper Input Validation | 5.3 | |
| Critical | CVE-2020-35163 | Dell BSAFE Crypto-C Micro Edition: Use of Insufficiently Random Values | 5.3 | |
| High | CVE-2020-26184 | Dell BSAFE Micro Edition Suite: Improper Certificate Validation | 7.5 | |
| High | CVE-2020-35164 | Dell BSAFE Crypto-C Micro Edition: Covert Timing Channel | 6.7 | |
| Critical | CVE-2020-35167 | Dell BSAFE Crypto-C Micro Edition: Exposure of Sensitive Information to an Unauthorized Actor | 4.8 | |
| Critical | CVE-2020-35166 | Dell BSAFE Crypto-C Micro Edition: Covert Timing Channel | 5.1 | |
| Critical | CVE-2020-35168 | Dell BSAFE Crypto-C Micro Edition: Missing Encryption of Sensitive Data | 4.7 |
News
- CISA Warns of Exploited Oracle WebLogic Vulnerabilitysecurityweek,
- Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Datathehackernews,
- KEV: Oracle, Zimbra, TrueConfsans-newsbites-mail,
- Two-year old Oracle WebLogic Server vulnerability is being exploitedcsoonline,