CVE-2024-21182—Oracle WebLogic Server Unspecified Vulnerability

漏洞名称

Oracle WebLogic Server Unspecified Vulnerability

描述

Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://www.oracle.com/security-alerts/cpujul2024.html
• https://nvd.nist.gov/vuln/detail/CVE-2024-21182

相关新闻文章

• CISA orders feds to patch actively exploited Oracle flaw by SaturdayJuly 16, 2026
• Over 900 Oracle E-Business instances exposed to ongoing attacksJuly 1, 2026
• Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active ExploitationJune 2, 2026
• CISA flags two-year-old Oracle flaw as actively exploited in attacksJune 2, 2026