CVE Watch—

CVE-2024-21182

Oracle WebLogic Server Unspecified Vulnerability

CVSS

—

Sin CVSS

EPSS

49.7%

p99

KEV

SÍ

1 jun 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

49.7%EPSS · 30 días49.7%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Oracle / WebLogic Server

Vulnerabilidad

Oracle WebLogic Server Unspecified Vulnerability

Añadido a KEV

1 jun 2026

Remediar antes de

4 jun 2026

Uso conocido en ransomware

Descripción resumida

Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.oracle.com/security-alerts/cpujul2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21182

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2020-14882—

100.0%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2017-10271—

100.0%

KEV—80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability—CVE-2019-2725—

100.0%

KEV—80Oracle WebLogic Server, Injection—CVE-2023-21839—

100.0%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2018-2628—

99.9%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-14750—

99.9%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—