KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Product / Oracle

Oracle WebLogic Server in CISA KEV

Catalog
2026.09.23
Vendor
Oracle
Updated
2026-06-01

Answer CISA's KEV catalog lists 12 vulnerabilities in Oracle WebLogic Server as of catalog 2026.09.23, 26.1% of Oracle's 46 entries. First added 2021-11-03, latest 2026-06-01; 2 ransomware-linked.

KEV entries
12
Ransomware: known
216.7%
First added
2021-11-03
Latest added
2026-06-01
Median days to due
101
Open deadlines
0federal

TAdditions by year

Oracle WebLogic Server KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 4; 2022: 3; 2023: 1; 2024: 2; 2025: 1; 2026: 1.012342021: 4 added420212022: 3 added320222023: 1 added120232024: 2 added220242025: 1 added120252026: 1 added (year to date)12026
Oracle WebLogic Server KEV additions by year
YearAdded
20214
20223
20231
20242
20251
20261

WWeaknesses

CWEs in Oracle WebLogic Server KEV entries
CWEEntriesShare
CWE-502 Unsafe deserialization216.7%
CWE-78 OS command injection18.3%
CWE-74 Injection18.3%

EAll entries

Oracle WebLogic Server entries in CISA KEV
CVEVulnerabilityAddedDueRansomwareCWE
CVE-2024-21182Oracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2020-2883Oracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2020-14644Oracle WebLogic Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2017-3506Oracle WebLogic Server OS Command Injection VulnerabilityUnknownCWE-78
CVE-2023-21839Oracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2018-2628Oracle WebLogic Server Unspecified VulnerabilityUnknownCWE-502
CVE-2017-10271Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityKnownnone listed
CVE-2019-2725Oracle WebLogic Server, InjectionKnownCWE-74
CVE-2020-14883Oracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2020-14882Oracle WebLogic Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2020-14750Oracle WebLogic Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2015-4852Oracle WebLogic Server Deserialization of Untrusted Data VulnerabilityUnknownCWE-502

Cite this

CISA's KEV catalog lists 12 vulnerabilities in Oracle WebLogic Server. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/products/oracle-weblogic-server/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API