CVE Watch—

CVE-2024-21182

Oracle WebLogic Server Unspecified Vulnerability

CVSS

—

No CVSS

EPSS

49.7%

p99

KEV

YES

Jun 1, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

49.7%EPSS · 30 days49.7%

2026-06-302026-07-16

KEV catalog record

Product

Oracle / WebLogic Server

Vulnerability

Oracle WebLogic Server Unspecified Vulnerability

Added to KEV

Jun 1, 2026

Remediate by

Jun 4, 2026

Known ransomware use

Summary description

Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.oracle.com/security-alerts/cpujul2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21182

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2020-14882—

100.0%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2017-10271—

100.0%

KEV—80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability—CVE-2019-2725—

100.0%

KEV—80Oracle WebLogic Server, Injection—CVE-2023-21839—

100.0%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2018-2628—

99.9%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-14750—

99.9%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—