Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity WebLogic CVE-2021-1994 Vulnerability (CVE-2021-1994) CVE-2021-1994 Critical WebLogic CVE-2021-2047 Vulnerability (CVE-2021-2047) CVE-2021-2047 Critical WebLogic CVE-2021-2064 Vulnerability (CVE-2021-2064) CVE-2021-2064 Critical WebLogic CVE-2021-2075 Vulnerability (CVE-2021-2075) CVE-2021-2075 Critical WebLogic CVE-2021-2108 Vulnerability (CVE-2021-2108) CVE-2021-2108 Critical WebLogic CVE-2021-2135 Vulnerability (CVE-2021-2135) CVE-2021-2135 Critical WebLogic CVE-2021-2136 Vulnerability (CVE-2021-2136) CVE-2021-2136 Critical WebLogic CVE-2021-2382 Vulnerability (CVE-2021-2382) CVE-2021-2382 Critical WebLogic CVE-2021-2394 Vulnerability (CVE-2021-2394) CVE-2021-2394 Critical WebLogic CVE-2021-2397 Vulnerability (CVE-2021-2397) CVE-2021-2397 Critical WebLogic CVE-2021-21350 Vulnerability (CVE-2021-21350) CVE-2021-21350 Critical WebLogic CVE-2021-35617 Vulnerability (CVE-2021-35617) CVE-2021-35617 Critical WebLogic CVE-2022-21306 Vulnerability (CVE-2022-21306) CVE-2022-21306 Critical WebLogic CVE-2023-22069 Vulnerability (CVE-2023-22069) CVE-2023-22069 Critical WebLogic CVE-2023-22072 Vulnerability (CVE-2023-22072) CVE-2023-22072 Critical WebLogic CVE-2023-22089 Vulnerability (CVE-2023-22089) CVE-2023-22089 Critical WebLogic CVE-2024-21181 Vulnerability (CVE-2024-21181) CVE-2024-21181 Critical WebLogic CVE-2024-21216 Vulnerability (CVE-2024-21216) CVE-2024-21216 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2015-4852) CVE-2015-4852 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2017-5645) CVE-2017-5645 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2018-2628) CVE-2018-2628 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2018-3245) CVE-2018-3245 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-14540) CVE-2019-14540 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-16335) CVE-2019-16335 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-16942) CVE-2019-16942 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-16943) CVE-2019-16943 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17267) CVE-2019-17267 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17531) CVE-2019-17531 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17571) CVE-2019-17571 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-20330) CVE-2019-20330 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-9546) CVE-2020-9546 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-9547) CVE-2020-9547 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-9548) CVE-2020-9548 CWE-502 CWE-502 Critical WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2026-35300) CVE-2026-35300 CWE-502 CWE-502 Critical WebLogic Improper Access Control Vulnerability (CVE-2019-2729) CVE-2019-2729 CWE-284 CWE-284 Critical WebLogic Improper Access Control Vulnerability (CVE-2026-35263) CVE-2026-35263 CWE-284 CWE-284 Critical WebLogic Improper Access Control Vulnerability (CVE-2026-35298) CVE-2026-35298 CWE-284 CWE-284 Critical WebLogic Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-17195) CVE-2019-17195 CWE-754 CWE-754 Critical WebLogic Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-22965) CVE-2022-22965 CWE-94 CWE-94 Critical WebLogic Improper Handling of Exceptional Conditions Vulnerability (CVE-2017-5638) CVE-2017-5638 CWE-755 CWE-755 Critical WebLogic Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-23457) CVE-2022-23457 CWE-22 CWE-22 Critical WebLogic Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2021-23450) CVE-2021-23450 CWE-1321 CWE-1321 Critical WebLogic Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-2725) CVE-2019-2725 CWE-138 CWE-138 Critical WebLogic Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-23305) CVE-2022-23305 CWE-138 CWE-138 Critical WebLogic Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-3257) CVE-2008-3257 CWE-119 CWE-119 Critical WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2025-21535) CVE-2025-21535 CWE-306 CWE-306 Critical WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35292) CVE-2026-35292 CWE-306 CWE-306 Critical WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35301) CVE-2026-35301 CWE-306 CWE-306 Critical WebLogic Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21347) CVE-2021-21347 CWE-434 CWE-434 Critical WebLogic Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2018-1000613) CVE-2018-1000613 CWE-470 CWE-470 Critical Werkzeug WSGI Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-29361) CVE-2022-29361 Critical Wing FTP Server RCE (CVE-2025-47812) CVE-2025-47812 CWE-158 CWE-158 Critical WordPress CVE-2006-4028 Vulnerability (CVE-2006-4028) CVE-2006-4028 Critical WordPress CVE-2008-6767 Vulnerability (CVE-2008-6767) CVE-2008-6767 Critical WordPress CVE-2011-3122 Vulnerability (CVE-2011-3122) CVE-2011-3122 Critical WordPress CVE-2011-3125 Vulnerability (CVE-2011-3125) CVE-2011-3125 Critical WordPress CVE-2012-2399 Vulnerability (CVE-2012-2399) CVE-2012-2399 Critical WordPress CVE-2012-2400 Vulnerability (CVE-2012-2400) CVE-2012-2400 Critical WordPress CVE-2020-28039 Vulnerability (CVE-2020-28039) CVE-2020-28039 Critical WordPress Deserialization of Untrusted Data Vulnerability (CVE-2018-20148) CVE-2018-20148 CWE-502 CWE-502 Critical WordPress Deserialization of Untrusted Data Vulnerability (CVE-2020-28032) CVE-2020-28032 CWE-502 CWE-502 Critical WordPress Deserialization of Untrusted Data Vulnerability (CVE-2020-36326) CVE-2020-36326 CWE-502 CWE-502 Critical WordPress Improper Input Validation Vulnerability (CVE-2008-2392) CVE-2008-2392 CWE-20 CWE-20 Critical WordPress Improper Input Validation Vulnerability (CVE-2019-20041) CVE-2019-20041 CWE-20 CWE-20 Critical WordPress Improper Input Validation Vulnerability (CVE-2020-28037) CVE-2020-28037 CWE-20 CWE-20 Critical WordPress Improper Input Validation Vulnerability (CVE-2020-35539) CVE-2020-35539 CWE-20 CWE-20 Critical WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-4769) CVE-2008-4769 CWE-22 CWE-22 Critical WordPress Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2016-10033) CVE-2016-10033 CWE-707 CWE-707 Critical WordPress Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2016-10045) CVE-2016-10045 CWE-138 CWE-138 Critical WordPress Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2008-4796) CVE-2008-4796 CWE-138 CWE-138 Critical WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-5611) CVE-2017-5611 CWE-138 CWE-138 Critical WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-14723) CVE-2017-14723 CWE-138 CWE-138 Critical WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-16510) CVE-2017-16510 CWE-138 CWE-138 Critical WordPress Improper Privilege Management Vulnerability (CVE-2020-28035) CVE-2020-28035 CWE-269 CWE-269 Critical WordPress Improper Privilege Management Vulnerability (CVE-2020-28036) CVE-2020-28036 CWE-269 CWE-269 Critical 1...202122 21 / 22
