What’s Vulnerable › Products

Oracle Weblogic Server Proxy Plug-In vulnerabilities

16 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Oracle Weblogic Server Proxy Plug-In version is affected

Exploited Oracle Weblogic Server Proxy Plug-In vulnerabilities

• CVE-2026-21962 — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Latest Oracle Weblogic Server Proxy Plug-In vulnerabilities

• CVE-2026-60365 — (CVSS 10.0)
• CVE-2026-60364 — (CVSS 9.8)
• CVE-2026-21962 — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (CVSS 10.0) — exploited
• CVE-2020-35169 — (CVSS 9.8)
• CVE-2020-35168 — (CVSS 9.8)
• CVE-2020-35167 — (CVSS 9.8)
• CVE-2020-35166 — (CVSS 9.8)
• CVE-2020-35164 — (CVSS 8.1)
• CVE-2020-35163 — (CVSS 9.8)
• CVE-2020-29508 — (CVSS 9.8)
• CVE-2020-29507 — (CVSS 9.8)
• CVE-2020-29506 — (CVSS 9.8)
• CVE-2020-26185 — (CVSS 7.5)
• CVE-2020-26184 — (CVSS 7.5)
• CVE-2020-5360 — (CVSS 7.5)
• CVE-2020-5359 — (CVSS 5.8)