Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:12.2.1.4.0:*:*:*:*:*:*:*

part: a version: 12.2.1.4.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductWeblogic Server Proxy Plug In (ffe6df20-f56a-529e-bdcd-e00a6c677ac0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21962 vulnerable 2026-06-08 07:49:17.437800 Details available
CRITICAL (10)
Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data. Note: Affected version for Weblogic Server Proxy Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).
Published: 2026-01-20T21:56:32.665Z
Updated: 2026-02-02T23:05:30.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5360 vulnerable 2026-06-08 05:26:42.268947 Details available
HIGH (7.5)
Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the affected systems.
Published: 2020-12-16T15:50:15.206Z
Updated: 2024-09-16T22:57:09.417Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5359 vulnerable 2026-06-08 05:26:42.261062 Details available
MEDIUM (5.8)
Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data.
Published: 2020-12-16T15:50:14.593Z
Updated: 2024-09-16T22:45:42.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35169 vulnerable 2026-06-08 05:25:00.874347 Details available
CRITICAL (9.1)
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.
Published: 2022-07-11T19:26:03.078Z
Updated: 2024-09-16T17:37:40.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35168 vulnerable 2026-06-08 05:25:00.873237 Details available
MEDIUM (4.7)
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
Published: 2022-07-11T19:25:57.203Z
Updated: 2024-09-16T16:33:23.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35167 vulnerable 2026-06-08 05:25:00.872216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35166 vulnerable 2026-06-08 05:25:00.871053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35164 vulnerable 2026-06-08 05:25:00.869423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35163 vulnerable 2026-06-08 05:25:00.868270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29508 vulnerable 2026-06-08 05:24:58.341030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29507 vulnerable 2026-06-08 05:24:58.339939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29506 vulnerable 2026-06-08 05:24:58.338373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26185 vulnerable 2026-06-08 05:23:50.794597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26184 vulnerable 2026-06-08 05:23:50.790236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.