CISA
CISA’s KEV Catalog Helps Firms Tackle Oracle WebLogic Risk
The Known Exploited Vulnerabilities (KEV) catalog, maintained by CISA, serves as an essential resource for cybersecurity professionals to manage vulnerabilities that are actively exploited. It aids organizations in prioritizing vulnerability management and staying informed about threat activities. The catalog includes updates on specific vulnerabilities, such as CVE-2024-21182 related to Oracle WebLogic Server, which allows unauthorized access if exploited.
Organizations are advised to apply mitigations or discontinue usage if necessary. The KEV catalog is available in various formats including CSV and JSON, and users can nominate new vulnerabilities for inclusion.
Story timeline CVE-2024-21182
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 1 Jun · 18:41 UTC | CISA | CISA flags Oracle WebLogic CVE-2024-21182 as actively exploited |
| Mon 1 Jun · 20:24 UTC | CISA | CISA Puts Oracle WebLogic Flaw CVE‑2024‑21182 on KEV List |
| Tue 2 Jun · 02:21 UTC | CISA | CISA’s KEV Catalog Helps Firms Tackle Oracle WebLogic Risk (this article) |
| Tue 2 Jun · 05:21 UTC | SecurityOnline | The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach |
| Tue 2 Jun · 07:32 UTC | SecurityOnline | Grandoreiro Banking Trojan Evades Defense via Lookalike Software |
| Tue 2 Jun · 10:32 UTC | SecurityOnline | CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites |
| Tue 2 Jun · 12:21 UTC | SecurityWeek | CISA Alerts to Active Exploits of Unpatched Oracle WebLogic Flaw |
| Tue 2 Jun · 16:32 UTC | Security Affairs | CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list |
| Tue 2 Jun · 19:00 UTC | The Hacker News | Oracle WebLogic CVE-2024-21182 added to KEV amid active exploits |