CVE-2024-21182

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://www.oracle.com/security-alerts/cpujul2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21182

Remediation deadline: June 4, 2026

Description

Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.

Timeline

Published:June 1st, 2026 12:00 AM

Last modified:June 1st, 2026 12:00 AM

Added to KEV:June 1st, 2026

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Oracle

Products

WebLogic Server

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute