Exposição de Oracle WebLogic Server

Web servers
191
score de exposição
2.060
sites usam
0
em exploração
23
críticos
Análise Vexday

Com 17 CVEs catalogadas e nenhuma atualmente no catálogo KEV da CISA, o Oracle WebLogic Server apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que não elimina a necessidade de atenção — especialmente considerando que 2 vulnerabilidades são de severidade crítica e 3 surgiram nos últimos 90 dias, indicando superfície de ataque em crescimento recente. O tipo de falha mais recorrente é CWE-306 (ausência de autenticação para função crítica), padrão que historicamente atrai interesse de agentes maliciosos em ambientes expostos. A CVE mais perigosa no momento é CVE-2025-21535, com score EPSS de 0.008, sugerindo probabilidade de exploração ainda baixa, mas que deve ser monitorada dado o perfil do componente afetado. Equipes de segurança devem priorizar a aplicação de patches para as vulnerabilidades críticas e acompanhar a evolução do EPSS das falhas recentes.

CVEs

54 resultados
CVE-2026-60977CRITICALVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that aEPSS 0.5%CVE-2026-60153HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected EPSS 0.5%CVE-2026-60529HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected EPSS 0.5%CVE-2026-60208CRITICALVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.5%CVE-2026-83021CRITICALVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affEPSS 0.4%CVE-2026-70756CRITICALVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60293HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services). Supported versions that arEPSS 0.4%CVE-2026-60203HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60343HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60207HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60313HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60699HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60415HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60702CRITICALVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2025-61752HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60201HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60312HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2025-30762HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2025-30753MEDIUMVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%CVE-2026-60196HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.4%