{"id":"CVE-2024-21182","kind":"vulnerability","aliases":["CVE-2024-21182"],"related":[],"title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","summary":"Oracle WebLogic Server has an unspecified flaw reachable over the T3 and IIOP protocols without logging in. A remote attacker can gain unauthorized access to data held by the server, and CISA lists it as actively exploited.","severity":"critical","cvss":7.5,"epss":null,"exploited":true,"exploited_at":"2026-06-01T00:00:00+00:00","products":[{"name":"Oracle WebLogic Server","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"oracle weblogic server","fixed":[],"affected":"= 12.2.1.4.0","ecosystem":"vendor"},{"name":"oracle weblogic server","fixed":[],"affected":"= 14.1.1.0.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","java","oracle","runtime","self-hosted","weblogic"],"not_affected_if":["no-weblogic-deployment","t3-and-iiop-blocked-at-network"],"how_to_check":null,"fix":"Apply the mitigations in Oracle's vendor advisory, or discontinue use of the product if mitigations are unavailable (per CISA required action).","status":"open","published_at":"2024-07-16T23:15:22+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:34:00+00:00","updated_at":"2026-10-23T23:44:51+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-10-23T20:34:00Z","model":"claude-haiku-5-5","output":{"fix":"Apply the mitigations in Oracle's vendor advisory, or discontinue use of the product if mitigations are unavailable (per CISA required action).","summary":"Oracle WebLogic Server has an unspecified flaw reachable over the T3 and IIOP protocols without logging in. A remote attacker can gain unauthorized access to data held by the server, and CISA lists it as actively exploited.","category":"runtime","who_cares":["weblogic","oracle","java","self-hosted"],"confidence":0.7,"analyst_note":"Find Oracle's Security Alert advisory for CVE-2024-21182 to get affected and fixed versions and the exact mitigation steps; sources here do not list them.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-weblogic-deployment","t3-and-iiop-blocked-at-network"],"severity_if_unknown":"critical"},"cost_usd":0.00037,"input_tokens":2125,"output_tokens":315,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2024':15A,18A '-21182':16A,19A '/av':147C '12.2.1.4.0':93C '14.1.1.0.0':95C '3.1':137C,146C '7.5':140C 'access':60B,104C,122C,128C,134C 'activ':72B 'affect':91C 'allow':99C 'attack':56B,101C,114C 'base':138C 'cisa':68B 'complet':127C 'compon':12A,85C 'compromis':109C 'confidenti':141C 'core':13A,86C 'critic':124C 'cve':14A,17A 'cvss':136C,143C,145C 'data':62B,125C,135C 'easili':96C 'exploit':29B,73B,97C 'flaw':43B 'fusion':10A,83C 'gain':58B 'h/i':153C 'held':63B 'host':35B 'iiop':49B,107C 'impact':142C 'java':30B 'l/pr':149C 'list':69B 'log':52B 'middlewar':11A,84C 'n':155C 'n/a':154C 'n/ac':148C 'n/s':151C 'n/ui':150C 'network':103C 'oracl':4A,9A,31B,37B,77C,82C,110C,131C 'oracle':20A,23A,26A 'product':7A,80C 'protocol':50B 'reachabl':44B 'remot':55B 'result':119C 'runtim':32B 'score':139C 'self':34B 'self-host':33B 'server':6A,22A,25A,28A,39B,66B,79C,112C,133C 'success':113C 'support':87C 't3':47B,106C 'u/c':152C 'unauthent':100C 'unauthor':59B,121C 'unspecifi':42B 'vector':144C 'version':88C 'via':105C 'vulner':1A,74C,98C,117C 'weblog':5A,36B,38B,78C,111C,132C 'weblogic':21A,24A,27A 'without':51B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-07-16T23:15:22+00:00","kev":{"dateAdded":"2026-06-01","dueDate":"2026-06-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-21182","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21182","severity":null,"published_at":"2026-06-01T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T14:39:37+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-21182","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21182","severity":null,"published_at":"2024-07-16T23:15:22+00:00","modified_at":"2026-06-17T07:08:41+00:00","first_seen_at":"2026-10-23T23:44:51+00:00","fetched_at":"2026-10-23T23:44:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}