Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Bea
Weblogic Server

BEA Systems weblogic server Vulnerabilities: CVEs, CISA KEV & Security Advisories

152 CVEs

BE

BEA Systems weblogic server Vulnerabilities

CVE security advisories and vulnerability history for weblogic server by BEA Systems.

152

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

12

Public exploits

PoC or exploit code

5.6

Avg CVSS

2000–2024

Last updated July 16, 2024

Overview

BEA Systems weblogic server has 152 published CVE records since 2000, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 5.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting BEA Systems weblogic server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include aix, hp-ux, linux, solaris, sunos, windows 2000.

Severity and exploitation

How the CVSS severity of BEA Systems weblogic server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical9

High32

Medium95

Low16

In CISA’s Known Exploited Vulnerabilities catalog

0

None of BEA Systems weblogic server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

12

12 of BEA Systems weblogic server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every BEA Systems weblogic server version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

12.2.1.4.01 CVE
14.1.1.0.01 CVE

Version ranges

8.1 <= v <= 8.197 CVEs
7.0 <= v <= 7.094 CVEs
6.1 <= v <= 6.153 CVEs
9.0 <= v <= 9.038 CVEs
9.1 <= v <= 9.128 CVEs
7.0.0.1 <= v <= 7.0.0.126 CVEs
6.0 <= v <= 6.017 CVEs
9.2 <= v <= 9.215 CVEs
5.1 <= v <= 5.113 CVEs
10.0 <= v <= 10.011 CVEs
<= 8.19 CVEs
<= 7.05 CVEs
3.1.8 <= v <= 3.1.85 CVEs
10.0_mp1 <= v <= 10.0_mp13 CVEs
4.0.4 <= v <= 4.0.43 CVEs
4.2 <= v <= 4.23 CVEs
4.5.1 <= v <= 4.5.13 CVEs
5.0.1 <= v <= 5.0.13 CVEs
<= 4.5.22 CVEs
4.0 <= v <= 4.02 CVEs
4.5 <= v <= 4.52 CVEs
<= 10.01 CVE
<= 6.11 CVE
<= 9.21 CVE
3.1.8 <= v <= 4.5.11 CVE
4.5.2 <= v <= 4.5.21 CVE

Find a version

152 CVEs

Sort

Critical vulnerability · 2024-07-16
CVE-2024-21175CWE-787
Critical · CVSS 9.1
EPSS 0.4% (37th pct)2024-07-16
Medium vulnerability · 2010-07-13
CVE-2010-2375
Public exploit
Medium · CVSS 6.4
EPSS 6.5% (93th pct)2010-07-13
Critical vulnerability · 2008-07-22
CVE-2008-3257
Public exploit
Critical · CVSS 10.0
EPSS 83.6% (100th pct)2008-07-22
Medium vulnerability · 2008-02-22
CVE-2008-0903
Medium · CVSS 4.3
EPSS 1.2% (66th pct)2008-02-22
Medium vulnerability · 2008-02-22
CVE-2008-0902
Medium · CVSS 4.3
EPSS 1.0% (61th pct)2008-02-22
High vulnerability · 2008-02-22
CVE-2008-0901
High · CVSS 7.1
EPSS 2.2% (82th pct)2008-02-22
Medium vulnerability · 2008-02-22
CVE-2008-0900
Medium · CVSS 6.0
EPSS 10.0% (95th pct)2008-02-22
Medium vulnerability · 2008-02-22
CVE-2008-0899
Medium · CVSS 4.3
EPSS 1.0% (61th pct)2008-02-22
Medium vulnerability · 2008-02-22
CVE-2008-0898
Medium · CVSS 5.8
EPSS 1.1% (64th pct)2008-02-22
High vulnerability · 2008-02-22
CVE-2008-0897
High · CVSS 7.9
EPSS 1.2% (67th pct)2008-02-22
Medium vulnerability · 2008-02-22
CVE-2008-0895
Medium · CVSS 6.4
EPSS 2.2% (81th pct)2008-02-22
Medium vulnerability · 2008-02-21
CVE-2008-0869
Medium · CVSS 4.3
EPSS 1.1% (62th pct)2008-02-21
Medium vulnerability · 2008-02-21
CVE-2008-0863
Medium · CVSS 5.0
EPSS 1.2% (66th pct)2008-02-21
Medium vulnerability · 2007-10-23
CVE-2003-1438
Medium · CVSS 4.3
EPSS 0.7% (51th pct)2007-10-23
Low vulnerability · 2007-10-23
CVE-2003-1437
Low · CVSS 2.1
EPSS 0.2% (12th pct)2007-10-23
Medium vulnerability · 2007-10-18
CVE-2007-5576
Medium · CVSS 6.8
EPSS 1.0% (60th pct)2007-10-18
Medium vulnerability · 2007-10-06
CVE-2004-2696
Medium · CVSS 5.5
EPSS 1.3% (68th pct)2007-10-06
High vulnerability · 2007-08-31
CVE-2007-4618
High · CVSS 7.8
EPSS 2.5% (83th pct)2007-08-31
High vulnerability · 2007-08-31
CVE-2007-4617
High · CVSS 7.8
EPSS 2.3% (82th pct)2007-08-31
Medium vulnerability · 2007-08-31
CVE-2007-4616
Medium · CVSS 6.4
EPSS 1.8% (77th pct)2007-08-31
Medium vulnerability · 2007-08-31
CVE-2007-4615
Medium · CVSS 6.4
EPSS 2.1% (81th pct)2007-08-31
High vulnerability · 2007-08-31
CVE-2007-4614
High · CVSS 7.5
EPSS 1.2% (66th pct)2007-08-31
Medium vulnerability · 2007-08-31
CVE-2007-4613
Medium · CVSS 6.8
EPSS 1.4% (70th pct)2007-08-31
Medium vulnerability · 2007-05-16
CVE-2007-2704
Medium · CVSS 5.4
EPSS 1.6% (75th pct)2007-05-16
Medium vulnerability · 2007-05-16
CVE-2007-2701
Medium · CVSS 4.6
EPSS 1.7% (75th pct)2007-05-16
Medium vulnerability · 2007-05-16
CVE-2007-2700
Medium · CVSS 4.0
EPSS 1.7% (76th pct)2007-05-16
High vulnerability · 2007-05-16
CVE-2007-2699
Public exploit
High · CVSS 7.1
EPSS 28.8% (98th pct)2007-05-16
Medium vulnerability · 2007-05-16
CVE-2007-2698
Medium · CVSS 5.0
EPSS 1.9% (78th pct)2007-05-16
Medium vulnerability · 2007-05-16
CVE-2007-2697
Medium · CVSS 5.1
EPSS 2.2% (81th pct)2007-05-16
Medium vulnerability · 2007-05-16
CVE-2007-2696
Medium · CVSS 6.8
EPSS 2.1% (81th pct)2007-05-16

Showing 30 of 152

Common weakness types

The CWE weakness categories most often found in BEA Systems weblogic server CVEs. Follow any weakness for its full explanation.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVE
CWE-787Out-of-bounds Write1 CVE

Disclosure activity by year

How many BEA Systems weblogic server CVEs were published each year.

2000

7

2001

1

2002

1

2003

8

2004

8

2005

32

2006

46

2007

36

2008

11

2010

1

2024

1

Other BEA Systems products

Browse vulnerabilities for other products by BEA Systems.

tuxedo5 CVEs weblogic portal5 CVEs aqualogic interaction4 CVEs weblogic integration4 CVEs weblogic workshop4 CVEs aqualogic service bus2 CVEs weblogic express2 CVEs apache connector in weblogic server1 CVEs

All BEA Systems vulnerabilities

Frequently asked questions

Common questions about BEA Systems weblogic server vulnerabilities.

How many CVEs does BEA Systems weblogic server have?: BEA Systems weblogic server has 152 published CVE records since 2000.
How many BEA Systems weblogic server CVEs are in CISA KEV?: None of BEA Systems weblogic server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for BEA Systems weblogic server vulnerabilities?: Yes — 12 of BEA Systems weblogic server's CVEs have a known public exploit.
Which versions of BEA Systems weblogic server are affected?: 28 distinct BEA Systems weblogic server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in BEA Systems weblogic server CVEs?: BEA Systems weblogic server's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-787 (Out-of-bounds Write).
How many critical BEA Systems weblogic server vulnerabilities are there?: BEA Systems weblogic server has 9 critical and 32 high-severity CVEs.
What is the average severity of BEA Systems weblogic server CVEs?: The average CVSS base score across BEA Systems weblogic server's scored CVEs is 5.6.

References

All BEA Systems vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track BEA Systems weblogic server vulnerabilities

Monitor new BEA Systems weblogic server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References