{"id":"CVE-2024-21182","published":"2024-07-16T23:15:22Z","modified":"2026-06-17T07:08:41Z","title":"Oracle WebLogic Server Unspecified Vulnerability","vendor":"Oracle","product":"WebLogic Server","tier":"core","eol":null,"description":{"text":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","provenance":"source","from":"NVD"},"summary":{"text":"An unspecified flaw in the Core component of Oracle WebLogic Server, part of Oracle Fusion Middleware, affects supported versions 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access over T3 or IIOP, requiring no user interaction and no special configuration, can gain unauthorized access to critical data, potentially all data accessible to the server.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:13:14Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"NVD"},"epss":{"score":0.74162,"percentile":0.99484,"date":"2026-10-29","provenance":"source"},"kev":{"dateAdded":"2026-06-01","dueDate":"2026-06-04","ransomware":false,"requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpujul2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21182","provenance":"source"},"vulncheckKev":{"dateAdded":"2026-06-01","exploitedFirstSeen":"2026-06-01","ransomware":false,"evidence":[{"url":"https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/617805ef-903a-4a2b-908c-995f178d2650","date":"2026-06-01"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2026-06-01"},{"url":"https://t.me/cibsecurity/89570","date":"2026-06-03"},{"url":"https://www.recordedfuture.com/blog/june-2026-cve-landscape","date":"2026-07-10"}],"evidenceTotal":4,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 30, 2026","url":"https://otx.alienvault.com/pulse/6ae35d889ea92b4ce19c2680","created":"2026-10-29"},{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpujul2024.html","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2024.html","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21182","tags":["US Government Resource"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Unauthenticated network exploitation of exposed WebLogic protocols","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"unauthenticated attacker with network access via T3, IIOP","start":209,"end":266}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1005","name":"Data from Local System","tactics":["collection"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Unauthorized read of critical data","mappingType":"primary_impact","evidence":[{"from":"description","quote":"unauthorized access to critical data or complete access","start":362,"end":417}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-18896","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-18896","exploited":true,"exploitedSince":"2026-06-01","provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":4,"skipped":0,"earliest":"2024-12-29","earliestUrl":"https://github.com/k4it0k1d/CVE-2024-21182","repos":[{"name":"dinosn/CVE-2024-21182","url":"https://github.com/dinosn/CVE-2024-21182","stars":3,"created":"2026-06-02"},{"name":"kursadalsan/CVE-2024-21182","url":"https://github.com/kursadalsan/CVE-2024-21182","stars":2,"created":"2024-12-29"},{"name":"k4it0k1d/CVE-2024-21182","url":"https://github.com/k4it0k1d/CVE-2024-21182","stars":1,"created":"2024-12-29"},{"name":"fevar54/CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE","url":"https://github.com/fevar54/CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE","stars":0,"created":"2026-06-09"}]},"first":{"date":"2024-12-29","source":"PoC-in-GitHub","url":"https://github.com/k4it0k1d/CVE-2024-21182"},"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1005"],"provenance":"ai"}],"timeline":[{"date":"2024-07-16","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21182","provenance":"source"},{"date":"2024-12-29","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/k4it0k1d/CVE-2024-21182","provenance":"source"},{"date":"2026-06-01","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/617805ef-903a-4a2b-908c-995f178d2650","provenance":"source"},{"date":"2026-06-01","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2026-06-01","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-18896","provenance":"source"}],"speed":{"daysToPublicExploit":166,"firstExploitFrom":"PoC-in-GitHub","daysToKev":685},"priority":{"score":73.1,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 151 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.9,"detail":"percentile 0.9948"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"4 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}