CVE-2024-21182 Oracle Corporation WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
- CVSS
- 7.5 High
- EPSS
- 74%
- Percentile
- 100
- Published
- 2024-07-16
- Force
- 10 of 12
- Public PoC
- 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
On CISA’s exploited list
Oracle WebLogic Server Unspecified Vulnerability
- Added
- 2026-06-01
- Federal patch deadline
- 2026-06-04
- Ransomware use
- not known