CVE entry · CVE-2024-21182
CVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability
Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.
- Actively exploited: added to CISA’s KEV catalog on June 1, 2026.
- Use by ransomware: not established so far.
- Remediation deadline for US federal agencies: June 4, 2026.
Description from CISA’s KEV catalog.
What to do
- Check whether your estate includes Oracle WebLogic Server, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
Other Oracle vulnerabilities
-
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
-
Oracle E-Business Suite Improper Privilege Management Vulnerability
-
CVE-2026-35273Used by ransomwareOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
-
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
-
CVE-2025-61884Used by ransomwareOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
-
CVE-2025-61882Used by ransomwareOracle E-Business Suite Unspecified Vulnerability