Vulnerabilities > Oracle > Weblogic Server > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-04-15 CVE-2020-2811 Unspecified vulnerability in Oracle Weblogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).
network
low complexity
oracle
6.1
2020-04-15 CVE-2020-2766 Unspecified vulnerability in Oracle Weblogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).
network
low complexity
oracle
5.3
2020-01-17 CVE-2020-5397 Cross-Site Request Forgery (CSRF) vulnerability in multiple products
Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints.
network
low complexity
vmware oracle CWE-352
5.3
2020-01-15 CVE-2020-2552 Unspecified vulnerability in Oracle Weblogic Server 10.3.6.0.0/12.1.3.0.0
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).
network
low complexity
oracle
4.8
2020-01-15 CVE-2020-2550 Unspecified vulnerability in Oracle Weblogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).
local
low complexity
oracle
5.1
2020-01-15 CVE-2020-2548 Unspecified vulnerability in Oracle Weblogic Server 10.3.6.0.0
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).
network
low complexity
oracle
4.8
2020-01-15 CVE-2020-2547 Unspecified vulnerability in Oracle Weblogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).
network
low complexity
oracle
4.8
2020-01-15 CVE-2020-2544 Unspecified vulnerability in Oracle Weblogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).
network
low complexity
oracle
4.3
2020-01-15 CVE-2020-2519 Unspecified vulnerability in Oracle Weblogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).
network
low complexity
oracle
4.3
2019-11-08 CVE-2019-10219 Cross-site Scripting vulnerability in multiple products
A vulnerability was found in Hibernate-Validator.
network
low complexity
redhat netapp oracle CWE-79
6.1