Oracle WebLogic Server

Search everything

Mentions · 7d0
Mentions · 30d2
All mentions5
First seenAug 26, 2026
Last mentioned9d ago

Timeline

5 articles · newest first

Oracle October 2026 CPU lists flaws across dozens of products

The October 20 notice names JD Edwards, MySQL, Java SE, WebLogic, PeopleSoft and many other lines, without CVE details.

Canadian Centre for Cyber SecurityOct 21, 18:28 UTC · 9d agoAdvisory

FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers

The FBI seized seven domains for Microscan and FishHub tools used by China-linked Flax Typhoon contractor Integrity Technology Group.

Cyber Security NewsOct 9, 02:24 UTC · 22d agoThreat actorExploited3

Oracle Corporation security advisory (AV26-929)

CCCS relays Oracle's September 2026 Critical Patch Update fixing vulnerabilities across WebLogic, Database, E-Business Suite, PeopleSoft, Siebel, and dozens more products.

Canadian Centre for Cyber SecuritySep 16, 19:29 UTC · Sep 16, 2026Advisory3 · 1 read

Oracle’s September patches put Fusion Middleware back in the hot seat

Oracle's September 2026 CPU ships 673 patches including six CVSS 10.0 flaws in Fusion Middleware and Hyperion, none exploited in the wild.

CSO OnlineSep 16, 15:54 UTC · Sep 16, 2026VulnerabilityCVE-2026-71133 CVE-2026-83099 CVE-2026-83059+166 · 1 read

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CISA added actively exploited Oracle WebLogic flaw CVE-2026-21962 (CVSS 10.0) to its KEV catalog, letting unauthenticated attackers access or modify critical data.

The Hacker NewsAug 26, 05:07 UTC · Aug 26, 2026Exploit / PoCExploitedCVE-2026-21962 CVE-2020-14882 CVE-2020-14883+24

Related CVEs

by mentions

CVE-2026-2196273%10.0
Unauthenticated Access Control Bypass in Oracle HTTP Server and WebLogic Proxy Plug-in
published Jan 20, 2026Oracle HTTP Server (Oracle Fusion Middleware)KEV
CVE-2020-14882100%9.8
Remote Code Execution in Oracle WebLogic Server
published Oct 21, 2020Oracle WebLogic ServerKEVPoC ×3
CVE-2017-10271100%7.5
Unauthenticated Remote Code Execution in Oracle WebLogic Server
published Oct 19, 2017Oracle WebLogic ServerKEVRansomwarePoC ×3
CVE-2026-7113310.0
Unauthenticated Takeover Flaw in Oracle Access Manager Authentication Engine (CVSS 10.0)
published Sep 15, 2026Oracle Access Manager (Oracle Fusion Middleware, Authentication Engine component)
CVE-2026-8305910.0
Unauthenticated LDAP Flaw Allows Full Takeover of Oracle Internet Directory
published Sep 15, 2026Oracle Internet Directory (Oracle Fusion Middleware, OID LDAP Server component)
CVE-2026-8302110.0
Unauthenticated HTTP Takeover Flaw in Oracle WebLogic Server Web Container
published Sep 15, 2026Oracle WebLogic Server (Oracle Fusion Middleware, component: Web Container)
CVE-2026-739489.9
Authenticated Takeover Flaw in Oracle WebCenter Portal Composer
published Sep 15, 2026Oracle WebCenter Portal (Oracle Fusion Middleware, Composer component)
CVE-2026-711639.9
Critical Flaw in Oracle Access Manager Authentication Engine Enables Full Compromise
published Sep 15, 2026Oracle Access Manager (Oracle Fusion Middleware, Authentication Engine component)
CVE-2026-829979.9
Low-Privilege Takeover in Oracle Service Delivery Platform via T3/IIOP
published Sep 15, 2026Oracle Fusion Middleware / Service Delivery Platform (component: Messaging Enabler)
CVE-2026-830569.9
Low-Privilege LDAP Flaw Allows Full Takeover of Oracle Internet Directory (CVSS 9.9)
published Sep 15, 2026Oracle Internet Directory (Oracle Fusion Middleware, component: OID LDAP Server)

Appears with

Oraclevendor · 5
Oracle E-Business Suiteproduct · 3
Canadian Centre for Cyber Securityorganization · 2
Oracle Database Serverproduct · 2
Juniper ScreenOSproduct · 1
Oracle VM VirtualBoxproduct · 1
Federal Bureau of Investigationorganization · 1
SNOWLIGHTproduct · 1
Microsoft Exchangeproduct · 1
PeopleSoftproduct · 1
U.S. Department of Justiceorganization · 1
Oracle HTTP Serverproduct · 1
JD Edwards EnterpriseOneproduct · 1
Oracle Hyperion Financial Managementproduct · 1
Jenkinsproduct · 1
SoftEther VPNproduct · 1

Entities are extracted by the model from each article. First seen Aug 26, 2026, last mentioned 9d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.