Cyber Resilience

CVE-2016-3510

Oracle Weblogic Server 10.3.6.0.0 … 12.2.1.0.0

Public PoCHigh EPSS
Published
21 July 2016
Modified
06 May 2026
Patch / advisory
View advisory
CVSS Score v3 9.8
Click a component to see what it means
Raw vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.91 99.8th percentile
Risk Priority 97 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2016-3510 is a critical-severity an unspecified weakness vulnerability in Oracle Weblogic Server. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 0.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2026-60527Same product: Oracle Weblogic Server
CVE-2023-21931Same product: Oracle Weblogic Server
CVE-2026-60698Same product: Oracle Weblogic Server
CVE-2024-20931Same product: Oracle Weblogic Server
CVE-2023-21837Same product: Oracle Weblogic Server
CVE-2023-22108Same product: Oracle Weblogic Server
CVE-2024-21007Same product: Oracle Weblogic Server
CVE-2020-14883Same product: Oracle Weblogic Server
CVE-2024-21181Same product: Oracle Weblogic Server
CVE-2026-35302Same product: Oracle Weblogic Server

Affected Assets

oracle
weblogic server
10.3.6.0.0, 12.1.3.0.0, 12.2.1.0.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References